Connect Contact Form 7 and AWeber

Connect Contact Form 7 and AWeber has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (100%).

Every one of the 2 issues recorded for Connect Contact Form 7 and AWeber has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Connect Contact Form 7 and AWeber is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
4.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Connect Contact Form 7 and AWeber vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2025-49988

Contact Form 7 AWeber Extension <= 0.1.42 - Missing Authorization

Read the full analysis

Vulnerability Records

2 records
Connect Contact Form 7 and AWeber banner
Latestv26.09.03.15

Connect Contact Form 7 and AWeber

Renzo Johnson

Author

Renzo Johnson

2.5(8)
50/100
Last Updated
2026-09-03 (9d ago)
Active Installs
300+
Downloads
58,812
Requires WP
6.4+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2016-01-03 (11y ago)
Requires Plugins
contact-form-7

Connect Contact Form 7 to AWeber and automatically add form subscribers to your AWeber mailing lists using the AWeber API. Choose a list per form, map subscriber fields, and pick the opt-in workflow that fits your audience. Each Contact Form 7 form can use its own AWeber list and settings, so one WordPress site can feed several lists: a newsletter signup, a lead-capture form, and a contact form can each go to the right place. AWeber Integration for Contact Form 7 Choose an AWeber list per form: send different Contact Form 7 forms to different lists. Map subscriber fields: map the email address, name, and supported AWeber custom fields. Choose single or double opt-in: send subscribers directly, or require the AWeber confirmation email. Add an optional consent checkbox: send data only when the visitor selects the checkbox. Configure inside Contact Form 7: manage credentials, list selection, and field mappings in the form editor. From the developers of the Contact Form 7 Mailchimp extension, and the Campaign Monitor, GetResponse, and iContact integrations. Browse all our free WordPress plugins. Requirements WordPress 6.4 or higher Contact Form 7 5.0 or higher An active AWeber account External Service: AWeber Connects your forms to the AWeber API. Support For the fastest help, contact us directly and the developers will answer you. Setup guides are available in the plugin documentation. Disclaimer Independently developed. Not affiliated with or endorsed by AWeber Communications, Inc. or the Contact Form 7 team. All trademarks belong to their owners.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C