Medium · 6.5 CVE-2026-100513 EUVD-2026-89939GHSA-97w4-4q94-v224

WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Description

Contributor Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.5 versions.

Vendor	Product	Affected	Fixed
Aman	CF7 Views – Complete Entry Management for Contact Form 7	≤ 3.2.5	—