Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-23899 EUVD-2023-27982GHSA-hg3h-cj8p-9jf6

WordPress Extensions For CF7 Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

Published Feb 17, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: HasThemes Product: Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)

Description

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin <= 2.0.8 versions leads to arbitrary plugin activation.

Affected products

VendorProductAffectedFixed
HasThemes Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) ≤ 2.0.8 —

References