HT Contact Form 7

Directory Traversal to Arbitrary File Move vulnerability <= 2.2.1

Unauthenticated Arbitrary File Upload vulnerability <= 2.2.1

Unauthenticated Arbitrary File Deletion vulnerability <= 2.2.1

Stored Cross Site Scripting (XSS) vulnerability <= 1.2.1

Arbitrary Plugin Activation via CSRF vulnerability < 1.1.6