Codedropz Contact Form 7 — known CVE vulnerabilities

Every CVE whose affected-product data names Codedropz Contact Form 7, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2025-14457 — CVSS 3.7 (low): The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a…