Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Renzo Johnson Clear all filters
TI-2025-42445 CVE-2025-68989 · GHSA-m9wg-62r3-4h9p

WordPress Contact Form 7 Extension For Mailchimp plugin <= 0.9.68 - Sensitive Data Exposure vulnerability

Priority LOW 20

Insertion of Sensitive Information Into Sent Data vulnerability in Renzo Johnson contact-form-7-mailchimp-extension contact-form-7-mailchimp-extension allows Retrieve Embedded Sensitive Data.This issue affects contact-fo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00255 Published 2025-12-30 No fix listed CWE-201
TI-2025-31903 CVE-2025-49988 · GHSA-9xmx-x5ww-xmxj

WordPress Contact Form 7 AWeber Extension plugin <= 0.1.40 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Renzo Johnson Contact Form 7 AWeber Extension integrate-contact-form-7-and-aweber allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00413 Published 2025-06-20 No fix listed CWE-862
TI-2024-29608 CVE-2024-44019 · GHSA-m6wr-8w28-2r5p

WordPress Contact Form 7 Campaign Monitor Extension plugin <= 0.4.67 - Arbitrary File Deletion vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in Renzo Johnson Contact Form 7 Campaign Monitor Extension contact-form-7-campaign-monitor-extension.This issue affects Contact Form 7 Campaign Monitor Extension: from n/a through <= 0…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00387 Published 2024-11-01 No fix listed CWE-862