Vulnerabilities

TI-2025-18412 CVE-2025-24695 · GHSA-826h-7wh2-gj4q

WordPress Extensions For CF7 Plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability

LOW 20

Server-Side Request Forgery (SSRF) vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Server Side Request Forgery.This issue affects Extensions For CF7: from n/a through <= 3.2.0.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.0035 Published 2025-01-24 No fix listed CWE-918

TI-2024-19276 CVE-2024-29102 · GHSA-pr6v-87q4-3hj8

WordPress Extensions For CF7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes Extensions For CF7 allows Stored XSS.This issue affects Extensions For CF7: from n/a through 3.0.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00331 Published 2024-03-19 No fix listed CWE-79

TI-2023-09698 CVE-2023-23899 · GHSA-hg3h-cj8p-9jf6

WordPress Extensions For CF7 Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 20

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin <= 2.0.8 versions leads to arbitrary plugin activation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00231 Published 2023-02-17 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Extensions For CF7 Plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability

WordPress Extensions For CF7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability

WordPress Extensions For CF7 Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)