7.6
High
CVE-2025-46252 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kofi Mokome…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kofi Mokome Message Filter for Contact Form 7 allows SQL Injection. This issue affects Message Filter for Contact Form 7: from n/a through 1.6.3.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Message Filter for Contact Form 7 1.6 | earliest → 1.6.3.2 | No fix stated |
| Message Filter for Contact Form 7 1.6 | earliest → 1.6.3.2 | No fix stated |
Other CVEs of Message Filter for Contact Form 7
The 4 CVEs of Message Filter for Contact Form 7 →
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
6.1
Medium
CVE-2024-12026
The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a…
4.3
Medium
CVE-2024-12027
The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a…
4.3
Medium