Contact Form 7 – Dynamic Text Extension

sevenspark

Developer

5.0.3

Latest version

100,000

Installations

No date

Last updated

WordPress Plugin

Active VDP

Report vulnerability

Vulnerabilities

Security Policy

Security Contributors

Vulnerability history

1 present

5 fixed

1 Mitigation rules

Content Injection vulnerability
<= 5.0.3
Sep 26, 2025
WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability
<= 5.0.1
Dec 19, 2024
Information Disclosure via Shortcode vulnerability
<= 4.5
Nov 5, 2024
Insecure Direct Object Reference vulnerability
<= 4.1.0
Jan 10, 2024
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 2.0.3
Jan 20, 2023
Reflected Cross-Site Scripting (XSS) vulnerability
<= 2.0.2.1
Jul 26, 2019