Dynamic Text Field For Contact Form 7
Dynamic Text Field For Contact Form 7 has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Dynamic Text Field For Contact Form 7 has a vendor fix available, so running the current release closes it.
All of these findings were reported by Muhammad Yudha - DJ. Dynamic Text Field For Contact Form 7 is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-58989Dynamic Text Field For Contact Form 7 <= 2.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Dynamic Text Field For Contact Form 7
Author
silverplugins217
Add Fields Dynamically Contact Form 7 With it you can access a lot of post information e.g. title, slug, URL, ID, and even custom fields with shortcode values. This plugin is also used in hidden field values so you can add any value in the shortcode in the hidden field. Dynamic text field for contact form 7 plugin provides a new Shortcode type tag for the Contact Form 7 Plugin. It allows the dynamic generation of content for a text input box via any shortcode. if you want to set up contact form 7 dynamic hidden fields you can make dynamic data. easy to access all features perfectly you can use GET, POST, and REQUEST all variables dynamically in your contact form 7. WITH THE CONTACT FORM 7 DYNAMIC FIELD PLUGIN YOU CAN: Easy to use Adding Tag, URL in custom fields. Using shortcode add post information. Custom text Field add here. Use Custom Value in a hidden field All posts, pages, and user all values populate in the custom shortcode Text field All posts, pages, and user all values populate in custom shortcode Hidden field Adding current posts and pages information – DYFCF7_get_post_title Adding current pages and posts URL – DYFCF7_page_url Adding current user information in all pages and posts – DYFCF7_get_current_user Adding custom fields values in all pages and posts – DYFCF7_get_custom_field key=’custom_key’ Adding blog information – DYFCF7_get_bloginfo Adding product information in product pages – DYFCF7_get_product WPML Support 🌟 Documentation | 🌟 Demo | 🌟 Support CONTRIBUTE AND TRANSLATE The dynamic text field for contact form 7 is translated into multiple languages Chinese, Dutch, Russian, Spanish, and many more. Help localize calculation for contact form 7 even further by adding your locale Language. Click Here
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C