rnzo
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Connect Contact Form 7 and AWeber | 1 | – | Nov 8, 2025 |
| Connect Contact Form 7 and Mailchimp | 1 | – | Jul 9, 2026 |
Exploited and recent CVEs
- CVE-2026-15000 Connect Contact Form 7 and Mailchimp <= 0.9.78.06 - Unauthenticated Stored Cross-Site Scripting via Mailchimp Merge Field Values 0.6%
- CVE-2025-12167 Contact Form 7 AWeber Extension <= 0.1.42 - Missing Authorization to Authenticated (Subscriber+) Log Reset 0.2%