ZealousWeb
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Track Geolocation Of Users Using Contact Form 7 | 2 | – | Aug 19, 2026 |
| Generate PDF using Contact Form 7 | 2 | – | Oct 9, 2026 |
| Accept PayPal Payments using Contact Form 7 | 1 | – | Apr 8, 2026 |
| Abandoned Contact Form 7 | 1 | – | Jun 27, 2025 |
| User Registration Using Contact Form 7 | 1 | – | Apr 9, 2025 |
| Accept Stripe Payments Using Contact Form 7 | 1 | – | Jun 27, 2025 |
| Accept Authorize.NET Payments Using Contact Form 7 | 1 | – | Jun 27, 2025 |
Exploited and recent CVEs
- CVE-2026-94666 WordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File Download vulnerability 0.4%
- CVE-2026-73386 WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability 0.4%
- CVE-2026-39707 WordPress Accept PayPal Payments using Contact Form 7 plugin <= 4.0.4 - Broken Access Control vulnerability 0.2%
- CVE-2025-53322 WordPress Accept Authorize.NET Payments Using Contact Form 7 plugin <= 2.5 - Sensitive Data Exposure Vulnerability 0.3%
- CVE-2025-53309 WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure Vulnerability 0.3%
- CVE-2025-52817 WordPress Abandoned Contact Form 7 plugin <= 2.2 - Broken Access Control vulnerability 0.3%
- CVE-2025-32679 WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-37555 WordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerability 0.6%
- CVE-2023-49188 WordPress Track Geolocation Of Users Using Contact Form 7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS) 0.4%