ZealousWeb vulnerabilities
9 published CVEs name ZealousWeb among the affected products.
- 9Published CVEs9 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-94666
WordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File Download vulnerability
ZealousWeb · Generate PDF using Contact Form 7
High7.5 - CVE-2026-73386
WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability
ZealousWeb · Track Geolocation Of Users Using Contact Form 7
High7.5 - CVE-2026-39707
WordPress Accept PayPal Payments using Contact Form 7 plugin <= 4.0.4 - Broken Access Control vulnerability
ZealousWeb · Accept PayPal Payments using Contact Form 7
Medium5.3 - CVE-2025-53322
WordPress Accept Authorize.NET Payments Using Contact Form 7 plugin <= 2.5 - Sensitive Data Exposure Vulnerability
ZealousWeb · Accept Authorize.NET Payments Using Contact Form 7
Medium5.3 - CVE-2025-53309
WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure Vulnerability
ZealousWeb · Accept Stripe Payments Using Contact Form 7
Medium5.3 - CVE-2025-52817
WordPress Abandoned Contact Form 7 plugin <= 2.2 - Broken Access Control vulnerability
ZealousWeb · Abandoned Contact Form 7
High8.2 - CVE-2025-32679
WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability
ZealousWeb · User Registration Using Contact Form 7
Medium5.4 - CVE-2024-37555
WordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerability
ZealousWeb · Generate PDF using Contact Form 7
Critical9.6 - CVE-2023-49188
WordPress Track Geolocation Of Users Using Contact Form 7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
ZealousWeb · Track Geolocation Of Users Using Contact Form 7
Medium5.9