Advisories · Technology

Generate PDF using Contact Form 7.

Every CVE that names Generate PDF using Contact Form 7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-90984 CVE record

CVSS 5.8 Medium

Generate PDF using Contact Form 7 < 4.2.2 - Unauthenticated Server-Side Request Forgery via Array-Valued Form Field
- Generate PDF using Contact Form 7
- Server-side request forgery (SSRF)
Not analysed yet 18 Sept 2026
CVE-2022-3070 CVE record

CVSS 4.8 Medium

Generate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site Scripting
- Generate PDF using Contact Form 7
- Cross-site scripting (XSS)
Not analysed yet 26 Sept 2022