WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click

WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 7.3, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Code Injection, behind 1 of the records (100%).

The one issue recorded for WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click has a vendor fix available, so running the current release closes it.

All of these findings were reported by Arkadiusz Hydzik. WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSHigh
7.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.3CVE-2024-11038

WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form

Read the full analysis

Vulnerability Records

1 records
WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click banner
Latestv2.3

WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click

WPBean

Author

WPBean

4.6(16)
92/100
Last Updated
2026-09-06 (7d ago)
Active Installs
6,000+
Downloads
106,522
Requires WP
6.6+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2021-03-16 (6y ago)

WPB Popup for Contact Form 7 makes it easy to display a Contact Form 7 popup on your WordPress website. Show any Contact Form 7 form in a responsive popup window when visitors click a button, link, or other trigger—without sending them to another page. Create a clean, user-friendly Contact Form 7 popup form that keeps your forms accessible while providing a seamless experience for your visitors. Live Demo | Documentation | Upgrade to Pro! If you’re looking for an easy way to display a Contact Form 7 popup on button click, WPB Popup for Contact Form 7 is an ideal solution for your website. Using a simple shortcode, you can add a popup button anywhere on your site, including posts, pages, widgets, or custom layouts. The plugin is built on top of the popular Contact Form 7 plugin, ensuring seamless integration and reliable form functionality. You can assign different Contact Form 7 forms to different popup buttons and display them in multiple locations across your website. Each popup button can also be customized with your preferred button text, color, and size directly from the plugin settings. It also includes WooCommerce-specific options, allowing you to display a Contact Form 7 popup button directly on WooCommerce product pages. This makes it easy for customers to submit product inquiries, ask pre-sales questions, request customizations, or get more information without leaving the product page. Contact Form 7 in Popup You might need to get feedback from users or create leads from site visitors. And you need to add a popup form for this on a certain page. And you want the popup button to be in the middle of the page text. In this case, this is the best option for you. Create contact form 7 popup form quickly and show it smartly. Looking for other contact form popup? WPB Contact Form Popup is our new plugin. It is compatible with all of the other popular contact form plugins. Examples include WPForms, Mailchimp, Forminator, Ninja Forms, Formidable, Form Maker by 10Web, weForms, Fluent Forms, HappyForms, WS Form, WPEverest User Registration, WP User Frontend, Bookly, Everest Forms, Kali Forms, and Bit Form. More integrations are on the way. Popup for Contact Form 7 Key Features Display Contact Form 7 popup on button click with ease. Fast and smooth AJAX-powered modal popup for Contact Form 7. Dedicated Elementor widget for Contact Form 7 popup. Add popup buttons using shortcode, PHP function, or action hooks. Show different popup buttons with different forms on specific pages. Advanced button and popup style customization options. Beginner-friendly and easy to set up. Fully RTL and translation ready. Premium Key Features Create unlimited popup buttons for Contact Form 7 forms. Display buttons via shortcodes, PHP functions, and action hooks. Assign different popup buttons and forms to different locations/pages. Add popup trigger links in navigation menus. Trigger popups automatically without button click. Auto popup triggers based on page load, exit intent, scroll, or hover. Target specific URLs, pages, or post types for auto popups. Advanced design and styling controls for popup and buttons. Customizable open and close popup animations. Option to auto-close popup after successful form submission. Powerful Elementor widget integration. Use as a standalone popup or inside Elementor layouts. Advanced popup button generator for multiple designs. Display popup buttons via any WordPress action hook. Clean and modern popup form design UI. Fully responsive, RTL, and mobile-friendly. Easy to customize and manage. Includes detailed documentation and video tutorials. Reliable premium support with free installation (if needed). Tested with popular themes and plugins. Fully compatible with the Gutenberg editor. Regular updates and improvements. Video Credit: WP Design Lab. Addons Support Conditional Fields for Contact Form 7 By Jules Colle. ReCaptcha v2 for Contact Form 7 By IQComputing. Drag and Drop Multiple File Upload – Contact Form 7 By Glen Don L. Mongaya. Support and Documentation Using this plugin is super easy as we have details online documentation for this. If you are having any issue with this plugin our expert support team always ready for you. Just open a support ticket on our support forum. Tested with the Following Themes Astra Ocean WP Hestia Kadence Neve Blocksy GeneratePress StudioPress Hello Elementor Divi Storefront Flatsome Avada Tove Raft Neve FSE The7 and Many More. Tested with the Following Page Builders Gutenberg Elementor & Elementor Pro Divi WPBakery Visual Composer Beaver Builder Oxygen GeneratePress

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C