Advisories · Technology
sevenspark Contact Form 7 – Dynamic Text Extension.
Every CVE that names sevenspark Contact Form 7 – Dynamic Text Extension among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability
- sevenspark Contact Form 7 – Dynamic Text Extension
- Information disclosure
- CVSS 5.3 Medium
WordPress Contact Form 7 Dynamic Text Extension plugin <= 5.0.5 - Content Injection vulnerability
- sevenspark Contact Form 7 – Dynamic Text Extension
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability
- sevenspark Contact Form 7 – Dynamic Text Extension
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode
- sevenspark Contact Form 7 – Dynamic Text Extension
- Information disclosure
- CVSS 4.3 Medium
Contact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object Reference
- sevenspark Contact Form 7 – Dynamic Text Extension
- Information disclosure