plugin

Cf7 Email Add On Vulnerabilities

1 known security issue reported for the Cf7 Email Add On WordPress plugin. Most recent disclosed Nov 20, 2024.

1 high

Running Cf7 Email Add On on your site? Check whether your installed version is affected.

Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion

high

The Contact Form 7 Email Add on plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the cf7_email_add_on_add_admin_template() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary PHP f...

CVSS:: 8.8
Affected:: up to 1.9
Fixed in:: 2.0
Disclosed:: Nov 20, 2024

CVE-2024-10898 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database