Medium · 4.4 CVE-2025-24695 EUVD-2025-3887GHSA-826h-7wh2-gj4q

WordPress Extensions For CF7 Plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability

Published Jan 24, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: HT Plugins Product: Extensions For CF7

Description

Server-Side Request Forgery (SSRF) vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Server Side Request Forgery.This issue affects Extensions For CF7: from n/a through <= 3.2.0.

Affected products

Vendor	Product	Affected	Fixed
HT Plugins	Extensions For CF7	≤ 3.2.0	—

References

https://patchstack.com/database/Wordpress/Plugin/extensions-for-cf7/vulnerability/wordpress-extensions-for-cf7-plugin-3-2-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry