- Published on
-
Jul 28, 2026
- Research Description
-
Contact Form 7 extensions can influence spam checks, stored submissions, redirects, and outbound webhooks. These features cross the boundary between anonymous form input, privileged records, external destinations, and front-end responses. CF7 Apps - Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 version 3.6.1 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64684, confirming that the plugin was reviewed from a secure code perspective with attention to public submissions, anti-spam checks, stored records, redirect targets, webhook configuration, and administrator access.
- Affected versions
-
Min 3.8.0,
max 3.8.0.
Plugin Security Certification
Join the community of developers who prioritize security. Highlight your plugin in the WordPress catalog.
Get Plugin Security Certificate
| New vulnerability |
|
Gantry 5 Framework
(CVE-2026-110889)
, Oct 20, 2026
|
|
Contact Form 7 Signature Addon
(CVE-2026-104246)
, Oct 20, 2026
|
|
HivePress – Business Directory & Classified Ads WordPress Plugin
(CVE-2026-110885)
, Oct 20, 2026
|
|
WP Data Access
(CVE-2026-106470)
, Oct 20, 2026
|
|
Salon booking system
(CVE-2026-110031)
, Oct 20, 2026
|