{"items":[{"id":"CVE-2026-9187","published":"2026-06-16T04:30:15.996Z","updated":"2026-06-16T12:37:54.599Z","title":"Abandoned Contact Form 7 <= 2.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'recover_id' Parameter","severity":"MEDIUM","score":5.3,"vendor":"zealopensource","product":"Abandoned Contact Form 7","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-5693","published":"2026-05-12T07:48:26.131Z","updated":"2026-05-12T12:47:37.797Z","title":"Smart Appointment & Booking <= 1.0.8 - Missing Authorization to Unauthenticated Arbitrary Booking Cancellation","severity":"MEDIUM","score":5.3,"vendor":"zealopensource","product":"Smart Appointment & Booking","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2026-0742","published":"2026-02-04T08:25:32.460Z","updated":"2026-04-08T17:19:24.185Z","title":"Smart Appointment & Booking <= 1.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via saab_save_form_data AJAX Action","severity":"MEDIUM","score":6.4,"vendor":"zealopensource","product":"Smart Appointment & Booking","kev":false,"epss":0.00292,"kevAdded":null,"exploit":false},{"id":"CVE-2025-12825","published":"2026-01-17T04:34:02.212Z","updated":"2026-04-08T17:16:59.140Z","title":"User Registration Using Contact Form 7 <= 2.5 - Authenticated (Subscriber+) Information Exposure","severity":"MEDIUM","score":5.3,"vendor":"zealopensource","product":"User Registration Using Contact Form 7","kev":false,"epss":0.00622,"kevAdded":null,"exploit":false},{"id":"CVE-2025-12834","published":"2025-12-12T03:20:59.271Z","updated":"2026-04-08T17:27:15.042Z","title":"Accept Stripe Payments Using Contact Form 7 <= 3.1 - Reflected Cross-Site Scripting via failure_message","severity":"MEDIUM","score":6.1,"vendor":"zealopensource","product":"Accept Stripe Payments Using Contact Form 7","kev":false,"epss":0.00249,"kevAdded":null,"exploit":false},{"id":"CVE-2025-2883","published":"2025-04-08T09:21:20.256Z","updated":"2026-04-08T17:31:36.570Z","title":"Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposure","severity":"MEDIUM","score":5.3,"vendor":"zealopensource","product":"Accept SagePay Payments Using Contact Form 7","kev":false,"epss":0.00417,"kevAdded":null,"exploit":false},{"id":"CVE-2024-12250","published":"2024-12-18T03:22:06.983Z","updated":"2026-04-08T17:26:53.189Z","title":"Accept Authorize.NET Payments Using Contact Form 7 <= 2.2 - Unauthenticated Information Exposure","severity":"MEDIUM","score":5.3,"vendor":"zealopensource","product":"Accept Authorize.NET Payments Using Contact Form 7","kev":false,"epss":0.00385,"kevAdded":null,"exploit":false},{"id":"CVE-2024-12255","published":"2024-12-12T05:24:22.258Z","updated":"2026-04-08T17:05:42.421Z","title":"Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure","severity":"MEDIUM","score":5.3,"vendor":"zealopensource","product":"Accept Stripe Payments Using Contact Form 7","kev":false,"epss":0.00516,"kevAdded":null,"exploit":false},{"id":"CVE-2024-6316","published":"2024-07-09T07:38:44.604Z","updated":"2026-04-08T16:52:54.792Z","title":"Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Upload","severity":"HIGH","score":8.8,"vendor":"zealopensource","product":"Generate PDF using Contact Form 7","kev":false,"epss":0.00519,"kevAdded":null,"exploit":false},{"id":"CVE-2024-6317","published":"2024-07-09T07:38:44.066Z","updated":"2026-04-08T16:49:33.461Z","title":"Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion","severity":"HIGH","score":8.8,"vendor":"zealopensource","product":"Generate PDF using Contact Form 7","kev":false,"epss":0.006,"kevAdded":null,"exploit":false}]}