CVE-2026-121768

The Markus Wiesenhofer Contact Form 7 – Post Fields (cf7-post-fields) plugin for WordPress is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. This issue arises from improper neutralization of input during web page generation , affecting versions from n/a through 2.6.0 . Successful exploit...

EUVD-2026-119016

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Markus Wiesenhofer Contact Form 7 Post Fields cf7-post-fields allows Stored XSS.This issue affects Contact Form 7 Post Fields: from n/a through 2.6.0...