CVE-2022-29408: Vsourz Advanced CF7 DB

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress.

Affected products

• Vsourz Advanced CF7 DB: up to and including 1.8.7

Published 2022-05-25. Last modified 2026-06-17.