PDF for Contact Form 7 vulnerabilities

2 known vulnerabilities in PDF for Contact Form 7 from Add-ons.org. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  PDF for Contact Form 7: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-94664Oct 9, 2026Add-ons.org

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.This issue affects PDF for Contact Form 7: from n/a through 7.1.0.

• 8.8 High severity

  PDF for Contact Form 7: Deserialization of Untrusted Data

  CVE-2025-60081Dec 18, 2025Add-ons.org

  Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Object Injection.This issue affects PDF for Contact Form 7: from n/a through <= 6.5.0.