WP Contact Form 7 DB Handler vulnerabilities

1 known vulnerability in WP Contact Form 7 DB Handler from Yudiz. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  WP Contact Form 7 DB Handler: Cross-Site Request Forgery

  CVE-2026-6455May 28, 2026Yudiz

  The WP Contact Form 7 DB Handler plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Deletion via SQL Injection and PHP Object Injection in versions up to and including 3.0. This is due to a missing nonce verification in