click5 CRM add-on to Contact Form 7 vulnerabilities
We track 2 vulnerabilities in click5 CRM add-on to Contact Form 7 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest click5 CRM add-on to Contact Form 7 vulnerabilities
- 8.8 High severity
click5 CRM add-on to Contact Form 7: Improper Neutralization of Input During Web Page Generation
The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privile
- 9.8 Critical severity
click5 CRM add-on to Contact Form 7: Missing Authorization
The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Contact Form 7 W