CVE-2025-22351

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in penguinarts Contact Form 7 Database – CFDB7 advanced-cf7-database allows SQL Injection.This issue affects Contact Form 7 Database – CFDB7: from n/a through = 1.0.0...

CVE-2025-22351

CVE-2025-22351 refers to an SQL injection in the WordPress plugin Contact Form 7 Database – CFDB7 . The vulnerability arises from improper neutralization of special elements used in SQL commands, enabling an authenticated attacker to craft payloads that could alter or read database data. Affected...