Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms
Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 2 are fixed as of August 2026. Their average CVSS score is 7.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Deserialization Of Untrusted Data.
Every one of the 2 issues recorded for Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-9691Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection
Read the full analysisVulnerability Records

Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms
Author
CRM Perks
Contact Form 7 ActiveCampaign extension sends form submissions from Contact Form 7, WPforms, Elementor Forms, Ninja Forms, Formidable Forms, Contact Form Entries and many other popular contact form plugins to ActiveCampaign when anyone submits a form. Learn more at crmperks.com How to Setup Go to “ActiveCampaign Accounts” tab then add new account. Go to “ActiveCampaign Feeds” tab then create a new feed. Map required ActiveCampaign fields to contact form 7 fields. Send your test entry to ActiveCampaign by clicking “send to ActiveCampaign” button. Go to “ActiveCampaign Logs” tab and verify status of previously sent entry. Connect ActiveCampaign account Connect any contact form 7 to ActiveCampaign account by simply entering ActiveCampaign API key. Additionally, you can connect multiple ActiveCampaign accounts to Contact Form 7. Map ActiveCampaign fields Select any ActiveCampaign Object then Map ActiveCampaign fields to any contact form 7 fields. Plugin displays all ActiveCampaign fields. Filter contact form 7 submissions Filter contact form 7 submissions sent to ActiveCampaign based on user input. For example , send those customers to ActiveCampaign who check “Subscribe to newsletter” checkbox. Manually send to ActiveCampaign Send contact form 7 submissions to ActiveCampaign when someone submits a contact form. You can manually send contact form 7 submissions to ActiveCampaign by clicking “Send to ActiveCampaign” button. ActiveCampaign logs View a detailed log of each contact form 7 submission Whether sent or not sent to ActiveCampaign and easily resend contact form 7 submission to ActiveCampaign. Send Data As ActiveCampaign Member Notes Send one to many contact form 7 form fields as ActiveCampaign Contact notes when someone submits a contact form on your site. Create Or Update Contact in ActiveCampaign If a member already exists in ActiveCampaign , update it otherwise create a new member in ActiveCampaign. Premium Version Features. Following features are available only in premium version Contact Form 7 ActiveCampaign Pro. ActiveCampaign Contact tags. Phone number field and all custom fields of ActiveCampaign. Add Contacts to multiple ActiveCampaign lists. Google Analytics Parameters and Geolocation of a visitor who submitted the form. Lookup lead’s email and phone using email and phone lookup apis. 20+ premium addons Want to send data to crm We have Premium Extensions for 20+ CRMs.View All CRM Extensions This Plugin is a fork of cf7 ActiveCampaign Plugin written by @codeincept
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C