Message Filter for Contact Form 7 vulnerabilities

2 known vulnerabilities in Message Filter for Contact Form 7 from Kofi Mokome. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Message Filter for Contact Form 7: Improper Neutralization of Input During Web Page Generation

  CVE-2026-57423Jul 13, 2026Kofi Mokome

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter allows Reflected XSS.This issue affects Message Filter for Contact Form 7: from n/a through <

• 7.2 High severity

  Message Filter for Contact Form 7: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-46252Apr 22, 2025Kofi Mokome

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kofi Mokome Message Filter for Contact Form 7 allows SQL Injection. This issue affects Message Filter for Contact Form 7: from n/a through 1.6.3.2.