Read the docs

WordPress Contact Form 7 Database Addon CFDB7 By Arshid

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WordPress Contact Form 7 Database Addon CFDB7 By Arshid records in CISA KEV

No WordPress Contact Form 7 Database Addon CFDB7 By Arshid vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 43

WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00329 Published 2025-10-28 No fix listed CWE-89
Open these records in search →