crmperks Database for Contact Form 7, WPforms, Elementor forms

• CVE-2026-9145 Medium 6.5 Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value' 0.4%
• CVE-2026-9843 High 8.1 Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value 1.0%
• CVE-2026-3831 Medium 4.3 Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode 0.2%
• CVE-2026-2599 Critical 9.8 Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv' 0.6%
• CVE-2026-0825 Medium 5.3 Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export 0.4%
• CVE-2025-7384 Critical 9.8 Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion 1.3%
• CVE-2024-3715 High 7.2 Database for Contact Form 7, WPforms, Elementor forms <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting 0.6%
• CVE-2024-2030 Medium 6.4 Database for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode 0.6%
• CVE-2024-1069 High 7.2 Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload 1.2%