Accept SagePay Payments Using Contact Form 7
Accept SagePay Payments Using Contact Form 7 has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).
The one issue recorded for Accept SagePay Payments Using Contact Form 7 has a vendor fix available, so running the current release closes it.
All of these findings were reported by Avraham Shemesh. Accept SagePay Payments Using Contact Form 7 is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-2883Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposure
Read the full analysisVulnerability Records

Accept SagePay Payments Using Contact Form 7
Author
ZealousWeb
SagePay Server Gateway for accepting payments on your Contact Form 7. The SagePay Payment system provides a secure, simple means of authorizing credit and debit card transactions from your website. The SagePay system provides a straightforward payment interface for the customer, and takes complete responsibility for the online transaction, including the collection and encrypted storage of credit and debit card details, eliminating the security implications of holding such sensitive information on your own servers. The plugin provides you the option to make payment only once. There is no recurring payment option available. Users can select the option to make Payment for one time since recurring transactions are not allowed. Features of Accept SagePay Payments Using Contact Form 7 Create multiple payment forms using Contact Form 7. In the Free version of SagePay, you can view the payment transactions of up to 10 Entries in the admin panel. Supports multiple forms on a single post or page. Permits to take values from all input fields including drop-down menu, textbox, hidden field, radio buttons, etc. Accepts dynamic value from frontend for parameters like item amount, email, quantity & billing, and shipping details. Option to Enable SagePay Sandbox Mode to ensure the functioning of the payment transactions. You can view SagePay payment data details at the admin side. All filters and search facilities are available on the admin side. Individual emails are sent to customers and admin after the SagePay payment transaction. [sagepay-payment-details] tag added to email content will display SagePay payment response in email. There is an option of Shortcode [sagepay-details] to display the transaction ID, transaction amount, and payment status after the transaction is made. You can set ‘Success Return URL’ and ‘Cancel Return URL’ pages to redirect after the payment transaction. You can use the Country field Tag option to display country in the drop-down; if you are working with the custom approach, you need to set the drop-down value in ISO 3166 ( Examples: GB, IE, and DE ), so we prefer to use our tag to display country list. Compatibility of WordPress VIP. Demo for Accept SagePay Payments Using Contact Form 7 Features of Accept SagePay Payments Using Contact Form 7 Pro We have released the PRO version of this plugin with extra advantageous features added. PRO Version 1.0 Released. Facility to import, export the list of entire SagePay unlimited Entries. In the list of SagePay forms entry in the admin side, you can view payment transactions unlimited Entries. Get more information of Pro version here Demo for Accept SagePay Payments Using Contact Form 7 Pro OUR OTHER PLUGINS Abandoned Contact Form 7 Pro Accept 2 Checkout Payments Using Contact Form 7 Pro Accept Authorize.NET Payments Using Contact Form 7 Pro Accept Elavon Payments Using Contact Form 7 Pro Accept PayPal Payments Using Contact Form 7 Pro Accept Sagepay(Opayo) Payments Using Contact Form 7 Pro Accept Stripe Payments Using Contact Form 7 Pro Custom Product Options WooCommerce Pro Generate PDF Using Contact Form 7 Pro Smart Appointment & Booking Pro Smart Showcase for Google Reviews Pro User Registration Using Contact Form 7 Pro Plugin Requirement PHP version : 5.6 and latest WordPress : WordPress 4.9 and latest
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C