ciphercoin Contact Form 7 Database Addon – CFDB7 (WordPress plugin) vulnerabilities

Latest ciphercoin Contact Form 7 Database Addon – CFDB7 (WordPress plugin) CVEs

Newest publication first

1. CVE-2021-36886 WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery (CSRF) vulnerability

   Published 2021-12-22

   High·CVSS 8.8 EPSS 0.56%

   Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).

2. CVE-2021-36885 WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

   Published 2021-12-22

   Medium·CVSS 6.1 EPSS 0.78%

   Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.6.1).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.