Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

ZealousWeb vulnerabilities

9 published CVEs name ZealousWeb among the affected products.

Newest CVEs

  • CVE-2026-94666

    WordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File Download vulnerability

    ZealousWeb · Generate PDF using Contact Form 7

    High7.5
  • CVE-2026-73386

    WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability

    ZealousWeb · Track Geolocation Of Users Using Contact Form 7

    High7.5
  • CVE-2026-39707

    WordPress Accept PayPal Payments using Contact Form 7 plugin <= 4.0.4 - Broken Access Control vulnerability

    ZealousWeb · Accept PayPal Payments using Contact Form 7

    Medium5.3
  • CVE-2025-53322

    WordPress Accept Authorize.NET Payments Using Contact Form 7 plugin <= 2.5 - Sensitive Data Exposure Vulnerability

    ZealousWeb · Accept Authorize.NET Payments Using Contact Form 7

    Medium5.3
  • CVE-2025-53309

    WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure Vulnerability

    ZealousWeb · Accept Stripe Payments Using Contact Form 7

    Medium5.3
  • CVE-2025-52817

    WordPress Abandoned Contact Form 7 plugin <= 2.2 - Broken Access Control vulnerability

    ZealousWeb · Abandoned Contact Form 7

    High8.2
  • CVE-2025-32679

    WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability

    ZealousWeb · User Registration Using Contact Form 7

    Medium5.4
  • CVE-2024-37555

    WordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerability

    ZealousWeb · Generate PDF using Contact Form 7

    Critical9.6
  • CVE-2023-49188

    WordPress Track Geolocation Of Users Using Contact Form 7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

    ZealousWeb · Track Geolocation Of Users Using Contact Form 7

    Medium5.9