Skip to content
OpenAdvisories

Vendor

ZealousWeb

9 known vulnerabilities.

Products

Track Geolocation Of Users Using Contact Form 7 2 Generate PDF using Contact Form 7 2 Abandoned Contact Form 7 1 Accept PayPal Payments using Contact Form 7 1 Accept Stripe Payments Using Contact Form 7 1 Accept Authorize.NET Payments Using Contact Form 7 1 User Registration Using Contact Form 7 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-39707

    WordPress Accept PayPal Payments using Contact Form 7 plugin <= 4.0.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ZealousWeb Accept PayPal Payments using Contact Form 7 contact-form-7-paypal-extension allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accept PayPal Payments using Contact Form …

    ZealousWeb Accept PayPal Payments using Contact Form 7
  • Medium 5.3
    CVE-2025-53322

    WordPress Accept Authorize.NET Payments Using Contact Form 7 plugin <= 2.5 - Sensitive Data Exposure Vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Authorize.NET Payments Using Contact Form 7 accept-authorize-net-payments-using-contact-form-7 allows Retrieve Embedded Sensitive Data.This issue affects Accept Authorize.NET…

    ZealousWeb Accept Authorize.NET Payments Using Contact Form 7
  • Medium 5.3
    CVE-2025-53309

    WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure Vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Stripe Payments Using Contact Form 7 accept-stripe-payments-using-contact-form-7 allows Retrieve Embedded Sensitive Data.This issue affects Accept Stripe Payments Using Conta…

    ZealousWeb Accept Stripe Payments Using Contact Form 7
  • Medium 5.4
    CVE-2025-32679

    WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ZealousWeb User Registration Using Contact Form 7 user-registration-using-contact-form-7 allows Cross Site Request Forgery.This issue affects User Registration Using Contact Form 7: from n/a through <= 2.4.

    ZealousWeb User Registration Using Contact Form 7
  • Medium 5.9
    CVE-2023-49188

    WordPress Track Geolocation Of Users Using Contact Form 7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZealousWeb Track Geolocation Of Users Using Contact Form 7 allows Stored XSS.This issue affects Track Geolocation Of Users Using Contact Form 7: from n/a thr…

    ZealousWeb Track Geolocation Of Users Using Contact Form 7