Contact Form 7 GetResponse Extension
Contact Form 7 GetResponse Extension has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).
The one issue recorded for Contact Form 7 GetResponse Extension has a vendor fix available, so running the current release closes it.
All of these findings were reported by Nabil Irawan. Contact Form 7 GetResponse Extension is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2026-24557Contact Form 7 GetResponse Extension <= 1.0.8 - Unauthenticated Information Exposure
Read the full analysisVulnerability Records
Contact Form 7 GetResponse Extension
Author
WEN Solutions
Contact Form 7 GetResponse extension is a simple yet useful plug-in to integrate Contact Form 7 with GetResponse. Using CF7 form, contacts can be automatically added to GetResponse campaigns. Different campaigns can be used on different CF7 forms. It also supports GetResponse custom fields which helps to collect required data from the users. Feature Include Simplicity Different Campaigns for different forms GetResponse Custom fields supported Opt-in checkbox, which gives user option to subscribe or not Requirements PHP 5.3 + Self hosted WordPress.org installation (3.9 + ) Contact Form 7 (4.2 +) Account on GetResponse
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C