Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Contact Form 7 – PayPal & Stripe Add-on — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Contact Form 7 – PayPal & Stripe Add-on, with AI-generated Chinese analysis, references, and POCs.

Vendor: Scott Paterson

CVE IDTitleCVSSSeverityPublished
CVE-2026-66660 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.5.1 - Broken Access Control vulnerability CWE-862 6.5 Medium2026-08-13
CVE-2026-9189 Contact Form 7 – PayPal & Stripe Add-on <= 2.4.9 - Unauthenticated Payment Bypass via Insufficient Verification of Data Authenticity via PayPal IPN Handler ('invoice'/'mc_gross' Verification) CWE-345 5.3 Medium2026-05-29
CVE-2025-47518 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3.4 - Cross Site Scripting (XSS) Vulnerability CWE-79 5.9 Medium2025-05-07
CVE-2024-10683 Contact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting CWE-79 6.1 Medium2024-11-09
CVE-2024-48021 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2024-10-17
CVE-2024-29130 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2024-03-19
CVE-2023-24405 WordPress Contact Form 7 – PayPal & Stripe Add-on Plugin <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 5.4 Medium2023-07-10

All 7 known CVE vulnerabilities affecting Contact Form 7 – PayPal & Stripe Add-on with full Chinese analysis, references, and POCs where available.