Contact Form 7 – Dynamic Text Extension

sevenspark

Developer

5.0.5

Latest version

100,000

Installations

No date

Last updated

WordPress Plugin

Active VDP

Report vulnerability

Vulnerabilities

Security Policy

Security Contributors

Vulnerability history

1 present

5 patched

1 Mitigation rules

Content Injection vulnerability
<= 5.0.5
26/09/2025
WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability
<= 5.0.1
19/12/2024
Information Disclosure via Shortcode vulnerability
<= 4.5
05/11/2024
Insecure Direct Object Reference vulnerability
<= 4.1.0
10/01/2024
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 2.0.3
20/01/2023
Reflected Cross-Site Scripting (XSS) vulnerability
<= 2.0.2.1
26/07/2019