CVE-2019-13571: Vsourz Advanced CF7 DB

Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days.

A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.

Affected products

• Vsourz Advanced CF7 DB: up to and including 1.6.1

Published 2019-07-29. Last modified 2026-06-17.