code4life
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Database for CF7 | 3 | – | Oct 6, 2026 |
Exploited and recent CVEs
- CVE-2026-39731 WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-13425 Database for CF7 <= 1.2.6 - Unauthenticated Stored Cross-Site Scripting via Array Form Field Values 0.4%
- CVE-2023-49167 WordPress Database for CF7 plugin <= 1.2.4 - Broken Access Control vulnerability 0.6%