WordPress plugin
Business Essentials for Contact Form 7 security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium3
- Low0
All Business Essentials for Contact Form 7 vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting via 'gateway' Form Field ≤1.2.1Update to 1.2.2 | CVE-2026-97661 |
- High7.2Unauthenticated Stored Cross-Site Scripting via 'gateway' Form Field
≤1.2.1Update to 1.2.2
Business Essentials for Contact Form 7: common questions
Does Business Essentials for Contact Form 7 have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Business Essentials for Contact Form 7: 1 high, 3 medium. None are known to affect version null.
How do I check which version of Business Essentials for Contact Form 7 I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Business Essentials for Contact Form 7 vulnerability?
CVE-2026-97661, published Sep 30, 2026: Business Essentials for Contact Form 7 <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting via 'gateway' Form Field. Severity: High (CVSS 7.2).
Is any Business Essentials for Contact Form 7 vulnerability listed in CISA KEV?
No. None of the known Business Essentials for Contact Form 7 vulnerabilities is currently listed in the CISA KEV catalog.