Vulnerabilities / Multi Step for Contact Form
Multi Step for Contact Form vulnerabilities
Advisories WPSec published for Multi Step for Contact Form 7. Other sources may list more. Its attack surface: Multi Step for Contact Form on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-13 | WPSEC-2026-3029 | Multi Step for Contact Form <= 2.9.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Modification and Deletion via '_cf7mls_db_form_data_id' Parameter | Medium 4.8 | 2.9.2 |
License: CC BY 4.0