Medium
CVE-2026-80439
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
High
CVE-2026-23970
Redirection for Contact Form 7 <= 3.2.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-14800
Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload
Medium
CVE-2025-9562
Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode
High
CVE-2025-8141
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-8289
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization
High
CVE-2025-8145
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection
Medium
CVE-2023-39920
Redirection for Contact Form 7 <= 2.9.2 - Missing Authorization
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
High
CVE-2023-23990
Redirection for Contact Form 7 <= 2.7.0 - Authenticated(Editor+) Privilege Escalation
Medium
CVE-2021-36913
Redirection for Contact Form 7 <= 2.4.0 - Missing Authorization
Medium
CVE-2022-0250
Redirection for Contact Form 7 <= 2.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium
CVE-2021-24281
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Post Deletion
Medium
CVE-2021-24282
Redirection for Contact Form 7 <= 2.3.3 - Unprotected AJAX Actions
High
CVE-2021-24280
Redirection for Contact Form 7 <= 2.3.3 - Authenticated PHP Object Injection
High
CVE-2021-24278
Redirection for Contact Form 7 <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation
Medium
CVE-2021-24279
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Plugin Installation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.