Description
Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code4life | Database for CF7 | ≤ 1.2.6 | — |
High · 7.1
CVE-2026-39731
EUVD-2026-93253GHSA-9prw-jw8p-fhcv
WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack