Vulnerabilities and security researches forcontact-form-7-honeypot contact-form-7-honeypot

Jul 28, 2026

PSC, Research URL: PSC-2026-64684
Home page URL: Security reports for Honeypot for Contact Form 7
Application: Honeypot for Contact Form 7
Date: Jul 28, 2026
Research Description: Contact Form 7 extensions can influence spam checks, stored submissions, redirects, and outbound webhooks. These features cross the boundary between anonymous form input, privileged records, external destinations, and front-end responses. CF7 Apps - Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 version 3.6.1 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64684, confirming that the plugin was reviewed from a secure code perspective with attention to public submissions, anti-spam checks, stored records, redirect targets, webhook configuration, and administrator access.
Affected versions: Min 3.7.2, max 3.7.2.
Status: SAFE & CERTIFIED

Oct 05, 2026

CVE, Research URL: CVE-2026-62058
Home page URL: Security reports for Honeypot for Contact Form 7
Application: Honeypot for Contact Form 7
Date: Oct 01, 2026
Research Description: Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Retrieve Embedded Sensitive Data.This issue affects CF7 Apps: from n/a through 3.7.2.
Affected versions: max 3.8.0.
Status: vulnerable