Log in Start free

SevenSpark

Products

ProductCVEsExploitedLatest
Contact Form 7 – Dynamic Text Extension5–Oct 10, 2026
Bellows Accordion Menu2–Jun 6, 2025
DTX – Dynamic Text Extension for Contact Form 72–Aug 5, 2026
UberMenu2–Jun 22, 2024
Menu Swapper1–Jul 1, 2023
ShiftNav – Responsive Mobile Menu1–Jun 6, 2025

Exploited and recent CVEs

  • CVE-2026-62043 High 7.5 WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-5116 Medium 4.4 Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-13146 Medium 6.5 Contact Form 7 – Dynamic Text Extension <= 5.0.7 - Unauthenticated Arbitrary Shortcode Execution 0.5%
  • CVE-2025-63068 Medium 5.3 WordPress Contact Form 7 Dynamic Text Extension plugin <= 5.0.5 - Content Injection vulnerability 0.3%
  • CVE-2025-49243 Medium 6.5 WordPress ShiftNav – Responsive Mobile Menu plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-49242 Medium 6.5 WordPress Bellows Accordion Menu plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2024-56218 Medium 4.3 WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-10084 Medium 4.3 Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode 0.4%
  • CVE-2024-3593 High 7.2 UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset 0.2%
  • CVE-2024-4710 Medium 6.4 Uber Menu <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes 0.3%
  • CVE-2023-6630 Medium 4.3 Contact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object Reference 0.3%
  • CVE-2023-5164 Medium 6.4 Bellows Accordion Menu <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%
  • CVE-2020-36746 Medium 4.3 Menu Swapper <= 1.1.0.2 - Cross-Site Request Forgery Bypass 0.5%