CVE-2024-10180

🗓️ 24 Oct 2024 12:32:58Reported by WordfenceType

The Contact Form 7 – Repeatable Fields WordPress plugin is vulnerable to Stored Cross-Site Scripting in all versions up to 2.0.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-10180	24 Oct 202415:58	–	circl
CNNVD	WordPress plugin Contact Form 跨站脚本漏洞	24 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-10180 Contact Form 7 - Repeatable Fields <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via field_group Shortcode	24 Oct 202412:32	–	cvelist
EUVD	EUVD-2024-32961	3 Oct 202520:07	–	euvd
NVD	CVE-2024-10180	24 Oct 202413:15	–	nvd
OSV	CVE-2024-10180	24 Oct 202413:15	–	osv
Patchstack	WordPress Contact Form 7 - Repeatable Fields Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)	24 Oct 202400:00	–	patchstack
Patchstack	WordPress Contact Form 7 - Repeatable Fields plugin <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via field_group Shortcode vulnerability	24 Oct 202406:36	–	patchstack
RedhatCVE	CVE-2024-10180	23 May 202508:18	–	redhatcve
Vulnrichment	CVE-2024-10180 Contact Form 7 - Repeatable Fields <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via field_group Shortcode	24 Oct 202412:32	–	vulnrichment

NVD

Vulners

Node

felipeelia contact_form_7_repeatable_fieldsRange<2.0.2wordpress

[
  {
    "vendor": "felipeelia",
    "product": "Contact Form 7 – Repeatable Fields",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.0.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/0782bc16-7d21-4205-af01-97e3ad3db40b
plugins	www.plugins.trac.wordpress.org/changeset/3173935/
wordpress	www.wordpress.org/plugins/cf7-repeatable-fields/

08 Apr 2026 16:34Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.4 - 6.4

EPSS0.01639

SSVC

CWE-79