Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-36886 EUVD-2021-23462GHSA-rw8v-f293-8h38

WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery (CSRF) vulnerability

Published Dec 22, 2021 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: CipherCoin Product: Contact Form 7 Database Addon – CFDB7 (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).

Affected products

VendorProductAffectedFixed
CipherCoin Contact Form 7 Database Addon – CFDB7 (WordPress plugin) <= 1.2.5.9 – ≤ 1.2.5.9 —

References