Webheadcoder Multi-Step Forms for Contact Form 7

WordPress plugin · contact-form-7-multi-step-module · WordPress.org ↗

Latest v4.7 Last release Aug 17, 2026 Tested up to WP 7.1.1 50,000+ active installs

Critical

High

Known total

Unfixed

Running Webheadcoder Multi-Step Forms for Contact Form 7 on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.1	Webheadcoder Multi-Step Forms for Contact Form 7 [contact-form-7-multi-step-module] < 4.3.1 WPVulnerability	< 4.3.1	v4.3.1	CVE-2023-33999	Jul 18, 2023
MEDIUM CVSS 6.1	Webheadcoder Multi-Step Forms for Contact Form 7 [contact-form-7-multi-step-module] < 4.4.2 WPVulnerability	< 4.4.2	v4.4.2	CVE-2024-13362	Apr 30, 2026
MEDIUM CVSS 6.3	Webheadcoder Multi-Step Forms for Contact Form 7 [contact-form-7-multi-step-module] < 4.1.91 WPVulnerability	< 4.1.91	v4.1.91	CVE-2022-4974	Mar 4, 2022
UNKNOWN	Webheadcoder Multi-Step Forms for Contact Form 7 [contact-form-7-multi-step-module] < 4.1.91 WPVulnerability	< 4.1.91	v4.1.91	—	Feb 28, 2022
UNKNOWN	Webheadcoder Multi-Step Forms for Contact Form 7 [contact-form-7-multi-step-module] < 4.1.91 WPVulnerability	< 4.1.91	v4.1.91	—	Feb 28, 2022
UNKNOWN	Webheadcoder Multi-Step Forms for Contact Form 7 [contact-form-7-multi-step-module] < 3.0.9 WPVulnerability	< 3.0.9	v3.0.9	—	Mar 5, 2019
UNKNOWN	Webheadcoder Multi-Step Forms for Contact Form 7 [contact-form-7-multi-step-module] < 3.0.9 WPVulnerability	< 3.0.9	v3.0.9	—	Feb 25, 2019
UNKNOWN	Webheadcoder Multi-Step Forms for Contact Form 7 [contact-form-7-multi-step-module] < 3.0.9 WPVulnerability	< 3.0.9	v3.0.9	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.