dtx_dynamic_text_extension_for_contact_form_7 vulnerabilities

CVEs whose affected-version data names the dtx_dynamic_text_extension_for_contact_form_7 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-13146Medium· 6.5

2mo ago

The The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.7

The The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.7. This is due to the software allowing users to execute an action that does no…

▾ Sunlitsevenspark · DTX – Dynamic Text Extension for Contact Form 7EPSS 0.47%via NVD