Skip to content
OpenAdvisories

Product · CRM Perks

Database for Contact Form 7, WPforms, Elementor forms

10 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-7384 Public exploit

    Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion

    The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserialization of untrusted input in the get_lead_detail function. This makes it possible for…