Vulnerabilities in ZealousWeb
9 resultsCVE-2024-37555CRITICALWordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2026-73386HIGHWordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2023-49188MEDIUMWordPress Track Geolocation Of Users Using Contact Form 7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-94666HIGHWordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2025-52817HIGHWordPress Abandoned Contact Form 7 plugin <= 2.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-53322MEDIUMWordPress Accept Authorize.NET Payments Using Contact Form 7 plugin <= 2.5 - Sensitive Data Exposure VulnerabilityEPSS 0.3%CVE-2025-53309MEDIUMWordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure VulnerabilityEPSS 0.3%CVE-2026-39707MEDIUMWordPress Accept PayPal Payments using Contact Form 7 plugin <= 4.0.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-32679MEDIUMWordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%