- Published on
-
Jul 28, 2026
- Research Description
-
Contact Form 7 extensions can influence spam checks, stored submissions, redirects, and outbound webhooks. These features cross the boundary between anonymous form input, privileged records, external destinations, and front-end responses. CF7 Apps - Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 version 3.6.1 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64684, confirming that the plugin was reviewed from a secure code perspective with attention to public submissions, anti-spam checks, stored records, redirect targets, webhook configuration, and administrator access.
- Affected versions
-
Min 3.8.0,
max 3.8.0.
Plugin Security Certification
Join the community of developers who prioritize security. Highlight your plugin in the WordPress catalog.
Get Plugin Security Certificate
| New vulnerability |
|
PowerPack Lite for Beaver Builder
(CVE-2026-110897)
, Oct 20, 2026
|
|
WP User Manager – User Profile Builder & Membership
(CVE-2026-110527)
, Oct 20, 2026
|
|
ChatBot Conversational Forms
(CVE-2026-110886)
, Oct 20, 2026
|
|
PAYCOMET for WooCommerce
(CVE-2026-109701)
, Oct 20, 2026
|
|
SMS Alert Order Notifications – WooCommerce
(CVE-2026-110882)
, Oct 20, 2026
|