Connect Contact Form 7 and AWeber
Connect Contact Form 7 and AWeber has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 2 of the records (100%).
Every one of the 2 issues recorded for Connect Contact Form 7 and AWeber has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Connect Contact Form 7 and AWeber is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-49988Contact Form 7 AWeber Extension <= 0.1.42 - Missing Authorization
Read the full analysisVulnerability Records

Connect Contact Form 7 and AWeber
Author
Renzo Johnson
contact-form-7Connect Contact Form 7 to AWeber and automatically add form subscribers to your AWeber mailing lists using the AWeber API. Choose a list per form, map subscriber fields, and pick the opt-in workflow that fits your audience. Each Contact Form 7 form can use its own AWeber list and settings, so one WordPress site can feed several lists: a newsletter signup, a lead-capture form, and a contact form can each go to the right place. AWeber Integration for Contact Form 7 Choose an AWeber list per form: send different Contact Form 7 forms to different lists. Map subscriber fields: map the email address, name, and supported AWeber custom fields. Choose single or double opt-in: send subscribers directly, or require the AWeber confirmation email. Add an optional consent checkbox: send data only when the visitor selects the checkbox. Configure inside Contact Form 7: manage credentials, list selection, and field mappings in the form editor. From the developers of the Contact Form 7 Mailchimp extension, and the Campaign Monitor, GetResponse, and iContact integrations. Browse all our free WordPress plugins. Requirements WordPress 6.4 or higher Contact Form 7 5.0 or higher An active AWeber account External Service: AWeber Connects your forms to the AWeber API. Support For the fastest help, contact us directly and the developers will answer you. Setup guides are available in the plugin documentation. Disclaimer Independently developed. Not affiliated with or endorsed by AWeber Communications, Inc. or the Contact Form 7 team. All trademarks belong to their owners.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C