Ciphercoin Contact Form 7 Database Addon
5 CVEs affecting Ciphercoin Contact Form 7 Database Addon. Latest disclosed: 2025-07-04. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3634 | Critical | 9.8 | 2022-11-21 | The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection |
CVE-2021-24144 | High | 7.8 | 2021-03-18 | Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrar… |
CVE-2021-36886 | Medium | 6.5 | 2021-12-22 | Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9). |
CVE-2025-6740 | Medium | 6.1 | 2025-07-04 | The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tmpD’ parameter in all versions up to, and includi… |
CVE-2021-36885 | Medium | 6.1 | 2021-12-22 | Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.6.1). |