Skip to content
OpenAdvisories

Vendor

vsourz1td

6 known vulnerabilities.

Products

Advanced Contact form 7 DB 6
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-6831

    Advanced Contact form 7 DB <= 2.1.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure via 'acf7db' Shortcode

    The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 2.0.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for…

    vsourz1td Advanced Contact form 7 DB Web / CMS
  • Medium 4.3
    CVE-2026-18594

    Advanced Contact form 7 DB <= 2.1.3 - Missing Authorization to Authenticated (Custom+) Unauthorized Data Import via 'import_cf7_id'

    The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for …

    vsourz1td Advanced Contact form 7 DB Web / CMS
  • Medium 5.4
    CVE-2026-0811

    Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion

    The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9. This is due to missing or incorrect nonce validation on the 'vsz_cf7_save_setting_callback' function. This makes it po…

    vsourz1td Advanced Contact form 7 DB Web / CMS
  • Medium 4.3
    CVE-2026-0814

    Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export

    The Advanced Contact form 7 DB plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'vsz_cf7_export_to_excel' function in all versions up to, and including, 2.0.9. This makes it possible for authenticated …

    vsourz1td Advanced Contact form 7 DB Web / CMS
  • Medium 5.3
    CVE-2024-4319

    Advanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure

    The Advanced Contact form 7 DB plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'vsz_cf7_export_to_excel' function in versions up to, and including, 2.0.2. This makes it possible for unauthenticated at…

    vsourz1td Advanced Contact form 7 DB Web / CMS
  • Medium 5.3
    CVE-2024-3723

    Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure

    The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.2 via the wp-content/uploads/advanced-cf7-upload directory. This makes it possible for unauthenticated attackers to e…

    vsourz1td Advanced Contact form 7 DB Web / CMS