WordPress security by component

Contact Form 7 Database – CFDB7

Plugin description

Contact Form 7 Database – CFDB7 is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 07, 2025; the highest CVE/CNA score is 7.6.

Plugin slug: wordpress-contact-form-7-database-cfdb7-plugin-1-0-0-sql-injection-vulnerability

Latest vulnerability

CVE-2025-22351: Contact Form 7 Database – CFDB7: SQL injection

Contact Form 7 Database – CFDB7 is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedJan 07, 2025

Safe version guidanceSee mitigation notes

		Safe version
Jan 07, 2025	CVE-2025-22351 Contact Form 7 Database – CFDB7: SQL injection Contact Form 7 Database – CFDB7 is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE7.6 NVDPending