WordPress plugin
W3SCloud Contact Form 7 to Zoho CRM security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All W3SCloud Contact Form 7 to Zoho CRM vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery ≤3.0No patch available | CVE-2025-60169 | |
| Medium6.3 | Missing Authorization Checks all versionsNo patch available | CVE-2022-4974 | |
| Medium6.1 | Reflected Cross-Site Scripting all versionsNo patch available | CVE-2021-24435 |
- Medium4.3Cross-Site Request Forgery
≤3.0No patch available
- Medium6.3Missing Authorization Checks
all versionsNo patch available
- Medium6.1Reflected Cross-Site Scripting
all versionsNo patch available
W3SCloud Contact Form 7 to Zoho CRM: common questions
Does W3SCloud Contact Form 7 to Zoho CRM have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in W3SCloud Contact Form 7 to Zoho CRM: 3 medium. At least one is not fixed in the latest version.
How do I check which version of W3SCloud Contact Form 7 to Zoho CRM I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent W3SCloud Contact Form 7 to Zoho CRM vulnerability?
CVE-2025-60169, published Sep 26, 2025: W3SCloud Contact Form 7 to Zoho CRM <= 3.0 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any W3SCloud Contact Form 7 to Zoho CRM vulnerability listed in CISA KEV?
No. None of the known W3SCloud Contact Form 7 to Zoho CRM vulnerabilities is currently listed in the CISA KEV catalog.