All 3 CVE vulnerabilities found in Database Addon for Contact Form 7 – CFDB7, with AI-generated Chinese analysis, references, and POCs.
Vendor: arshidkv12
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-107652 | Database Addon for Contact Form 7 <= 1.4.1 - Unauthenticated Limited File Deletion via Injected 'attackcfdb7_file' Submission Field CWE-639 | 5.3 | Medium | 2026-10-14 |
| CVE-2025-6740 | Contact Form 7 Database Addon <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting via tmpD Parameter CWE-79 | 6.1 | Medium | 2025-07-04 |
| CVE-2024-3870 | Contact Form 7 Database Addon – CFDB7 <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure CWE-200 | 5.3 | Medium | 2024-05-02 |
All 3 known CVE vulnerabilities affecting Database Addon for Contact Form 7 – CFDB7 with full Chinese analysis, references, and POCs where available.