en
Severity across 5 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 5 vulnerability records affecting Advanced Contact form 7 DB.
Among the 5 records analyzed by CyStack, 0 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-18594Advanced Contact form 7 DB <= 2.1.3 - Missing Authorization to Authenticated (Custom+) Unauthorized Data Import via 'import_cf7_id' | Exploitation statusNot known exploited | FixYes | Published09/10/2026 | SeverityMedium |
CVE-2026-0811Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion | Exploitation statusNot known exploited | FixYes | Published04/08/2026 | SeverityMedium |
CVE-2026-0814Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export | Exploitation statusNot known exploited | FixYes | Published04/08/2026 | SeverityMedium |
CVE-2024-3723Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure | Exploitation statusNot known exploited | FixYes | Published06/11/2024 | SeverityMedium |
CVE-2024-4319Advanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure | Exploitation statusNot known exploited | FixYes | Published06/11/2024 | SeverityMedium |
