Database for Contact Form 7, WPforms, Elementor forms
Database for Contact Form 7, WPforms, Elementor forms has 20 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 20 are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 8 high. 2026 was the busiest year with 9 disclosures.
The most common weakness is Cross-Site Scripting, behind 9 of the records (45%). Other recurring categories include Deserialization Of Untrusted Data, Missing Authorization.
Every one of the 20 issues recorded for Database for Contact Form 7, WPforms, Elementor forms has a vendor fix available, so running the current release closes all known holes.
16 independent researchers contributed these findings, most of them (2) reported by daroo. Database for Contact Form 7, WPforms, Elementor forms is installed on roughly 60,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-2599Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'
Read the full analysisVulnerability Records
Database for Contact Form 7, WPforms, Elementor forms
Author
CRM Perks
Contact Form 7 Entries Plugin automatically saves form submissions from Contact Form 7, WPforms, Elementor Forms, CRM Perks Forms and many other popular contact form plugins to wordpress database when anyone submits a form. Learn more our forms builder and entries at crmperks.com Supported Contact Forms Contact Form 7 CRM Perks Forms WPForms Elementor Forms Contact form 7 entries features You can view all contact form entries in default wordpress table form. Search contact form entries by all or specific field. Filter contact form entries by Date. You can mark contact form entries as read or un-read. You can star or un-star contact form entries. Print all or selected contact form entries. You can also print notes related to each contact form entry. Select entries table columns from “Screen Options”. File field of an entry supports multiple files. Add, edit notes to any contact form entry. Display contact form entries on any wordpress page in sortable table form. Export contact form entries in csv format. Why we built this plugin Contact Form 7 is free contact form builder. This free Contact Form 7 Entries plugin adds entries management and all premium features to free wordpress contact forms including contact form 7. You can send entries data to your CRM or mailing lists. WPforms database addon This Plugin saves WPforms entries into wordpress database, you can view and edit any entry. You can also export all entries as csv file. Contact Form 7 Entries Stats This plugin displays contact form 7 submissions summary by contact form on dashboard. You can see all read/un-read entries of all contact forms at one place. Contact Form Entry Notes You can add notes to any contact form entry and you can edit old notes. Also you can select note color to mark it as important or normal. GDPR compliant You can disable storing form entries into database. You can disable storing user’s IP address , Browser , Screen Resolution and OS. Adds all contact form entries of a user when exporting user data using wordpress “Export Personal Data” tool. Deletes all contact form entries of a user when deleting user data using wordpress “Erase Personal Data” tool. Premium Version Features. Following features are available in premium add-ons Get all add-ons and CRM Perks forms. Don’t miss out on any potential leads. Collect data in real time as it is entered on your forms. Search field and Download CSV button for front end entries table. Complete clickable links for file fields in front end entries table. Google Analytics Parameters and Geolocation of a visitor who submitted the form. Lookup lead’s email and phone using email and phone lookup apis. 20+ premium add-ons Get access to all addons and CRM Perks forms Want to send data to crm We have Premium Extensions for 20+ CRMs.View All CRM Extensions Contact Form Klaviyo Plugin Contact Form Google Sheets Plugin Contact Form Streak Plugin Contact Form Freshdesk Plugin Contact Form 7 Pardot
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C