WordPress Contact Form 7 Database Addon CFDB7 By Arshid vulnerabilities
We track 1 vulnerability in WordPress Contact Form 7 Database Addon CFDB7 By Arshid products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2025.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest WordPress Contact Form 7 Database Addon CFDB7 By Arshid vulnerabilities
- 9.6 Critical severity
CFDB7: Improper Neutralization of Special Elements used in an SQL Command
WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection). The weakness arises due to insufficient validation of us