SevenSpark DTX – Dynamic Text Extension for Contact Form 7

• CVE-2026-5116 Medium 4.4 Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting 0.3%
• CVE-2025-13146 Medium 6.5 Contact Form 7 – Dynamic Text Extension <= 5.0.7 - Unauthenticated Arbitrary Shortcode Execution 0.5%