Conditional Fields for Contact Form 7

WordPress plugin · cf7-conditional-fields · WordPress.org ↗

Latest v2.7.13 Last release Sep 6, 2026 Tested up to WP 7.1.1 100,000+ active installs

Critical

High

Known total

Unfixed

Running Conditional Fields for Contact Form 7 on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.5	Conditional Fields for Contact Form 7 [cf7-conditional-fields] < 2.7.3 WPVulnerability	< 2.7.3	v2.7.3	CVE-2026-25863	May 4, 2026
MEDIUM CVSS 5.9	Conditional Fields for Contact Form 7 [cf7-conditional-fields] < 2.5 WPVulnerability	< 2.5	v2.5	CVE-2024-50412	Oct 24, 2024
MEDIUM CVSS 4.3	Conditional Fields for Contact Form 7 [cf7-conditional-fields] < 2.4.14 WPVulnerability	< 2.4.14	v2.4.14	CVE-2024-5804	Jul 19, 2024
MEDIUM CVSS 4.3	Conditional Fields for Contact Form 7 [cf7-conditional-fields] < 2.4.2 WPVulnerability	< 2.4.2	v2.4.2	CVE-2023-47838	Nov 16, 2023
UNKNOWN	Conditional Fields for Contact Form 7 [cf7-conditional-fields] < 2.4.1 WPVulnerability	< 2.4.1	v2.4.1	—	Nov 14, 2023

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.