Skip to content
OpenAdvisories
High · 7.6 CVE-2025-22351 EUVD-2025-2750GHSA-qvc8-367v-rwrv

WordPress Contact Form 7 Database – CFDB7 plugin <= 1.0.0 - SQL Injection vulnerability

Published Jan 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in penguinarts Contact Form 7 Database – CFDB7 advanced-cf7-database allows SQL Injection.This issue affects Contact Form 7 Database – CFDB7: from n/a through <= 1.0.0.

Affected products

VendorProductAffectedFixed
penguinarts Contact Form 7 Database – CFDB7 ≤ 1.0.0 —

References