High 7.5 Unfixed
2026-05-04≤ 2.6.7
CVE-2026-25863
Minimum safe version
2.5
Update to 2.5 or later to address 4 fixable vulnerabilities
CVE-2026-25863
CVE-2024-50412
WordPress Conditional Fields for Contact Form 7 Plugin <= 2.4.13 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-47838
Conditional Fields for Contact Form 7 <= 2.4.0 - Missing Authorization