Contact Form 7 extension for Google Map fields

Contact Form 7 extension for Google Map fields has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Contact Form 7 extension for Google Map fields has a vendor fix available, so running the current release closes it.

Contact Form 7 extension for Google Map fields is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.

Strategic Overview

Avg CVSSHigh
7.2/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Contact Form 7 extension for Google Map fields vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2

Contact Form 7 extension for Google Map fields <= 1.8.3 - Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv1.9.0

Contact Form 7 extension for Google Map fields

Aurovrata Venet

Author

Aurovrata Venet

4.7(15)
94/100
Last Updated
2023-07-11 (3y ago)
Active Installs
500+
Downloads
37,059
Requires WP
5.6+
Requires PHP
7.4+
Tested up to
WP 6.2.11
Created
2017-02-18 (10y ago)

This plugin enables the insertion of google maps into contact form 7 as an input field, functionality available with this plugin include Multi-map per form – the zoom and default location to be configured in the form edit page itself, thus different maps/forms can have different default map zoom levels and pin location. The front end form displays the configured map and registers the location change of the pin which can be included in the email notification. Compatible with Post My CF7 Form – play nice with the Post My CF7 Form plugin Address lookup search bar – a search field is available to lookup addresses, if a user changes manually the first line of the (optional) address field, the reverse-geocode is frozen. This allows for address corrections. Reverse Geocode – an optional set of address fields can be enabled from the cf7 tag to display reverse-geocode text address Totally customisable – a set of filters are provided to control all configuration parameters on each map. Popup compatible – this plugin allows users to control defferred map initialisation on popups. Customise map actions – the plugin exposes the map object with events (on initialisation/updates), allowing users to add additional features to their maps. The plugin makes use of JQuery Google Maps (gmap3) plugin, and exposes both the Gmap3 as well as the Google map objects. Google map is disabled for Airplane Mode plugin activation to allow you to develop without an Internet connection. Plays nice with repetitive fields constructs from the Smart Grid-Layout extension for CF7 plugin. Checkout our other CF7 plugin extensions CF7 Polylang Module – this plugin allows you to create forms in different languages for a multi-language website. The plugin requires the Polylang plugin to be installed in order to manage translations. Smart Grid-layout Extension for CF7 – this plugin fixes amny shortcomings of the CF7 plugin, most importantly it allows you to build a grid-layout (multi-row/multi-column) responsive form among many other useful functionality. Post My CF7 Form – this plugin allows you to save you cf7 form submissions to a custom post, map your fields to meta fields or taxonomy. It also allows you to pre-fill fields before your form is displayed. Final slide-form data

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C