WordPress Advanced Contact form 7 DB Plugin <= 2.0.9 is vulnerable to Broken Access Control
Advanced Contact form 7 DB
Minimum safe version
2.1.0
Update to 2.1.0 or later to address 12 fixable vulnerabilities
Latest available2.1.1 ✓
N/A
2026-04-09< 2.1.0
N/A
2026-04-08< 2.1.0
Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion
N/A
2025-04-07< 2.0.9
Advanced Contact form 7 DB <= 2.0.8 & Import any XML, CSV or Excel File to WordPress <= 3.8.0 - Use of Vulnerable Component (PHPExcel)
Medium 5.3
2024-06-11< 2.0.3
CVE-2024-3723
Medium 5.3
2024-06-11< 2.0.3
CVE-2024-4319
N/A
2019-04-11< 1.6.1
Advanced Contact form 7 DB <= 1.6.0 - SQL Injection
N/A
< 1.6.1
Advanced Contact form 7 DB <= 1.6.0 - Authenticated SQL Injection
N/A
2017-08-24< 1.1.1
WordPress Advanced Contact form 7 DB Plugin <= 1.1.0 - Authenticated Information Disclosure Vulnerability
N/A
2019-04-12< 1.6.1
WordPress Advanced Contact form 7 DB plugin <= 1.6.0 - Authenticated SQL Injection (SQLi) vulnerability
Medium 4.7
2022-05-25< 1.8.8
CVE-2022-29408
High 8.0
2022-03-21< 1.8.7
CVE-2021-24905
Critical 9.8
2020-09-22< 1.7.1
Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection