Contact Form 7 Round Robin Lead Distribution vulnerabilities

2 known vulnerabilities in Contact Form 7 Round Robin Lead Distribution from David Jeffrey. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Contact Form 7 Round Robin Lead Distribution: Improper Neutralization of Input During Web Page Generation

  CVE-2025-23812Jan 22, 2025David Jeffrey

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Jeffrey Contact Form 7 Round Robin Lead Distribution contact-form-7-round-robin-lead-distribution allows Reflected XSS.This issue affects Contact Form 7

• 7.6 High severity

  Contact Form 7 Round Robin Lead Distribution: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-23784Jan 22, 2025David Jeffrey

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Jeffrey Contact Form 7 Round Robin Lead Distribution contact-form-7-round-robin-lead-distribution allows SQL Injection.This issue affects Contact Form 7