sevenspark vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20245
3. 20253
4. 20263

Newest CVEs

• CVE-2026-62043

  WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability

  sevenspark · Contact Form 7 – Dynamic Text Extension

  High7.5
• CVE-2026-5116

  Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting

  sevenspark · DTX – Dynamic Text Extension for Contact Form 7

  Medium4.4
• CVE-2025-13146

  Contact Form 7 – Dynamic Text Extension <= 5.0.7 - Unauthenticated Arbitrary Shortcode Execution

  sevenspark · DTX – Dynamic Text Extension for Contact Form 7

  Medium6.5
• CVE-2025-63068

  WordPress Contact Form 7 Dynamic Text Extension plugin <= 5.0.5 - Content Injection vulnerability

  sevenspark · Contact Form 7 – Dynamic Text Extension

  Medium5.3
• CVE-2025-49243

  WordPress ShiftNav – Responsive Mobile Menu plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

  sevenspark · ShiftNav – Responsive Mobile Menu

  Medium6.5
• CVE-2025-49242

  WordPress Bellows Accordion Menu plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability

  sevenspark · Bellows Accordion Menu

  Medium6.5
• CVE-2024-56218

  WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability

  sevenspark · Contact Form 7 – Dynamic Text Extension

  Medium4.3
• CVE-2024-10084

  Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode

  sevenspark · Contact Form 7 – Dynamic Text Extension

  Medium4.3
• CVE-2024-3593

  UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset

  SevenSpark · UberMenu

  High7.2
• CVE-2024-4710

  Uber Menu <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes

  SevenSpark · UberMenu

  Medium6.4