Renzo Johnson
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Contact Form 7 Extension For Mailchimp | 2 | – | Apr 26, 2024 |
| Blocks | 1 | – | Oct 2, 2023 |
| Contact Form 7 AWeber Extension | 1 | – | Jun 20, 2025 |
| Contact Form 7 Campaign Monitor Extension | 1 | – | Nov 1, 2024 |
| contact-form-7-mailchimp-extension | 1 | – | Dec 30, 2025 |
Exploited and recent CVEs
- CVE-2025-68989 WordPress Contact Form 7 Extension For Mailchimp plugin <= 0.9.68 - Sensitive Data Exposure vulnerability 0.3%
- CVE-2025-49988 WordPress Contact Form 7 AWeber Extension plugin <= 0.1.40 - Broken Access Control vulnerability 0.4%
- CVE-2024-44019 WordPress Contact Form 7 Campaign Monitor Extension plugin <= 0.4.67 - Arbitrary File Deletion vulnerability 0.4%
- CVE-2024-33677 WordPress Contact Form 7 Extension For Mailchimp plugin <= 0.5.70 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-22134 WordPress Contact Form 7 Extension For Mailchimp Plugin <= 0.5.70 is vulnerable to Server Side Request Forgery (SSRF) 0.3%
- CVE-2023-44262 WordPress Blocks Plugin <= 1.6.41 is vulnerable to Cross Site Scripting (XSS) 0.4%