Skip to content
OpenAdvisories

Vendor

magicplugins

2 known vulnerabilities.

Products

Magic Conversation For Gravity Forms 1 Magic Tooltips For Contact Form 7 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-101928

    Magic Tooltips For Contact Form 7 <= 1.0.34 - Unauthenticated Stored Cross-Site Scripting via 'esc_html' Filter Override via Comment Author

    The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all versions up to, and including, 1.0.34 due to insufficient input sanitization and output escaping. This makes it possible …

    magicplugins Magic Tooltips For Contact Form 7 Web / CMS