Database For Contact Form 7 Wpforms Elementor Forms

WordPress plugin · database-for-contact-form-7-wpforms-elementor-forms · WordPress.org ↗

Critical

High

Known total

Unfixed

Running Database For Contact Form 7 Wpforms Elementor Forms on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.1	Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_id CVE.org	>=0, <1.5.3	v1.5.3	CVE-2026-14870	Jul 28, 2026
MEDIUM CVSS 6.8	Database for Contact Form 7, WPforms, Elementor forms < 1.5.5 - Authenticated SQL Injection via id Parameter CVE.org	>=0, <1.5.5	v1.5.5	CVE-2026-14872	Aug 4, 2026
MEDIUM CVSS 5.0	Database for Contact Form 7, WPforms, Elementor forms < 1.5.2 - Unauthenticated PHP Object Injection via Entry File Field CVE.org	>=0, <1.5.2	v1.5.2	CVE-2026-12081	Jul 13, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.