Skip to content
OpenAdvisories

Product · HT Plugins

Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-94589

    Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload

    The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7_submit function. This is due to missing file extension,…

    HT Plugins Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) Web / CMS