Vendors / WordPress Contact Form 7 Database Addon CFDB7 By Arshid WordPress Contact Form 7 Database Addon CFDB7 By Arshid Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now WordPress Contact Form 7 Database Addon CFDB7 By Arshid records in CISA KEV No WordPress Contact Form 7 Database Addon CFDB7 By Arshid vulnerabilities are listed in CISA KEV.
Priority MEDIUM 43
WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection).
CVSS 3.1 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00329 · Published 2025-10-28 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
Critical1 High0 Medium0 Low0 No CVSS0