← All advisories

Unrated severityNVD Advisory· Published Jul 27, 2026· Updated Jul 28, 2026

WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.9 - Cross Site Scripting (XSS) vulnerability

CVE-2026-65438

Description

Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 versions.

Affected products

2

WordPress/Contact Form 7 Message Filterinferred
Range: <=1.6.3.9
Package: https://wordpress.org/plugins/contact-form-7-message-filter
WordPress/Message Filter for Contact Form 7llm-fuzzy
Range: <=1.6.3.9

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/cf7-message-filter/vulnerability/wordpress-message-filter-for-contact-form-7-plugin-1-6-3-9-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.