Advisories · Technology

cmsMinds Pay with Contact Form 7.

Every CVE that names cmsMinds Pay with Contact Form 7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-73384 CVE record

CVSS 7.5 High

WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
- cmsMinds Pay with Contact Form 7
- Information disclosure
Not analysed yet 19 Aug 2026
CVE-2025-52777 CVE record

CVSS 7.1 High

WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Cross Site Scripting (XSS) Vulnerability
- cmsMinds Pay with Contact Form 7
- Cross-site scripting (XSS)
Not analysed yet 16 Jul 2025
CVE-2025-24772 CVE record

CVSS 5.4 Medium

WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Cross Site Request Forgery (CSRF) Vulnerability
- cmsMinds Pay with Contact Form 7
- Cross-site request forgery (CSRF)
Not analysed yet 6 Jun 2025
CVE-2025-32126 CVE record

CVSS 7.6 High

WordPress Pay with Contact Form 7 Plugin <= 1.0.4 - SQL Injection vulnerability
- cmsMinds Pay with Contact Form 7
- SQL injection
Not analysed yet 4 Apr 2025