CVE-2022-3604: Crmperks Database For Contact Form 7, Wpforms, Elementor Forms

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection.

Affected products

• Crmperks Database For Contact Form 7, Wpforms, Elementor Forms: before 1.3.0 (fixed in 1.3.0)

Published 2024-01-16. Last modified 2026-06-17.