WordPress security by component
Spam Protect for Contact Form 7
Plugin description
Spam Protect for Contact Form 7 is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Apr 02, 2026; the highest CVE/CNA score is 7.2.
Plugin slug:
spam-protect-for-contact-form-7Latest vulnerability
CVE-2026-1540: Spam Protect for Contact Form 7: Code execution
Spam Protect for Contact Form 7 is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is < 1.2.10.
| Safe version |
|
||
|---|---|---|---|
| Apr 02, 2026 |
CVE-2026-1540
Spam Protect for Contact Form 7: Code execution
Spam Protect for Contact Form 7 is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is < 1.2.10.
|
1.2.10 |
CVE7.2
NVDPending
|