WordPress security by component
Contact form 7 Custom validation
Plugin description
Contact form 7 Custom validation is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 06, 2023; the highest published CVSS base score is 8.2.
Plugin slug:
cf7-field-validationLatest vulnerability
CVE-2023-40609: Contact form 7 Custom validation: SQL injection
Contact form 7 Custom validation is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
| Safe version |
|
||
|---|---|---|---|
| Nov 06, 2023 |
CVE-2023-40609
Contact form 7 Custom validation: SQL injection
Contact form 7 Custom validation is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
|
See mitigation notes |
CVE8.2
NVD9.8
|