Skip to content
OpenAdvisories

Vendor

Mario Valney

2 known vulnerabilities.

Products

OG Tags 1 CF7 to Webhook 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-11395

    CF7 to Webhook <= 5.0.0 - Unauthenticated Server-Side Request Forgery via CF7 Field Placeholder in Webhook URL Host

    The CF7 to Webhook plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.0 via the pull_the_trigger. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations origina…

    Mario Valney CF7 to Webhook Web / CMS