← WordPress Vulnerabilities
WordPress security by component

WP Contact Form7 Email Spam Blocker

WP Contact Form7 Email Spam Blocker is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 25, 2025; the highest CVE/CNA score is 6.1.

Plugin slug: wp-contact-form7-email-spam-blocker

CVE-2024-13467: WP Contact Form7 Email Spam Blocker: Cross-site scripting

WP Contact Form7 Email Spam Blocker is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedJan 25, 2025
Safe version guidanceSee mitigation notes
Safe version
Jan 25, 2025 CVE-2024-13467
WP Contact Form7 Email Spam Blocker: Cross-site scripting
WP Contact Form7 Email Spam Blocker is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.1
NVDPending