High · 7.6 CVE-2024-55990 EUVD-2024-52890GHSA-w3r7-6c65-fr45

WordPress Mollie for Contact Form 7 plugin <= 5.0.0 - SQL Injection vulnerability

Published Dec 16, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: tsjippy Product: Mollie for Contact Form 7

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tsjippy Mollie for Contact Form 7 cf7-mollie allows Blind SQL Injection.This issue affects Mollie for Contact Form 7: from n/a through <= 5.0.0.

Affected products

Vendor	Product	Affected	Fixed
tsjippy	Mollie for Contact Form 7	≤ 5.0.0	—

References

https://patchstack.com/database/Wordpress/Plugin/cf7-mollie/vulnerability/wordpress-mollie-for-contact-form-7-plugin-5-0-0-sql-injection-vulnerability?_s_id=cve vdb-entry