7.6 High

CVE-2025-23784 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Jeffrey…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Jeffrey Contact Form 7 Round Robin Lead Distribution contact-form-7-round-robin-lead-distribution allows SQL Injection.This issue affects Contact Form 7 Round Robin Lead Distribution: from n/a through <= 1.2.1.

Affected products and versions

Product	Affected versions	Fixed in
Contact Form 7 Round Robin Lead Distribution 1.2	earliest → 1.2.1	No fix stated
Contact Form 7 Round Robin Lead Distribution 1.2	earliest → 1.2.1	No fix stated

The 2 CVEs of Contact Form 7 Round Robin Lead Distribution →

CVE-2025-23812 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Jeffrey… 7.1 High

Do you use Contact Form 7 Round Robin Lead Distribution?

Track this CVE Watch Contact Form 7 Round Robin Lead Distribution Check my SBOMs

www.cveye.io/en/cve/CVE-2025-23784

Timeline

Published January 22, 2025
Last modified April 29, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2025-23784 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Jeffrey…

Description

Affected products and versions

Other CVEs of Contact Form 7 Round Robin Lead Distribution