Known vulnerabilities in Unknown Contact Form 7
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-14236 | The Contact Form 7 WordPress plugin before 2.5 does not validate the host of a user-supplied return URL before using it… | 4.7 Medium | Jul 27, 2026 |
| CVE-2024-4704 | The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and… | 6.1 Medium | Jun 27, 2024 |