Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-28902 EUVD-2025-7859GHSA-pj98-cfvv-rcxg

WordPress Contact Form 7 Select Box Editor Button plugin <= 0.6 - Cross Site Request Forgery (CSRF) vulnerability

Published Mar 11, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Benjamin Pick Contact Form 7 Select Box Editor Button contact-form-7-select-box-editor-button allows Cross Site Request Forgery.This issue affects Contact Form 7 Select Box Editor Button: from n/a through <= 0.6.

Affected products

VendorProductAffectedFixed
Benjamin Pick Contact Form 7 Select Box Editor Button ≤ 0.6 —

References