CVE-2026-120547

The CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 plugin for WordPress (versions

EUVD-2026-124973

The CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpcf7-form CF7 form body; the honeypot ... tag value' parameter in all versions up to, and including, 3.8.0 due to insufficient input...