Multi Step For Contact Form 7 vulnerabilities

2 known vulnerabilities in Multi Step For Contact Form 7 from NinjaTeam. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Multi Step for Contact Form 7: Improper Neutralization of Input During Web Page Generation

  CVE-2026-116753Nov 14, 2026NinjaTeam

  The Multi Step for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'multipart field name (array key)' parameter in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. Thi

• 9.8 Critical severity

  Multi Step for Contact Form: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-47331Oct 11, 2024Ninja Team

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ninja Team Multi Step for Contact Form cf7-multi-step allows SQL Injection.This issue affects Multi Step for Contact Form: from n/a through <= 2.7.7.