https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-12255.htmlhttps://patchthecve.com/cve/CVE-2024-12255.htmlWed, 17 Jun 2026 06:59:20 +0000MEDIUM 5.3: The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via the cf7sa-info.php file that returns phpinfo() data. This makes it possible for unauthenticated attackers to extract configuration information thathttps://patchthecve.com/cve/CVE-2024-6317.htmlhttps://patchthecve.com/cve/CVE-2024-6317.htmlWed, 17 Jun 2026 08:17:46 +0000HIGH 8.8: The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.1.2. This is due to missing nonce validation and the plugin not properly validating a file or its path prior to deleting it in the 'wp_chttps://patchthecve.com/cve/CVE-2024-6316.htmlhttps://patchthecve.com/cve/CVE-2024-6316.htmlWed, 17 Jun 2026 08:17:45 +0000HIGH 8.8: The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.1.2. This is due to missing nonce validation and missing file type validation in the 'wp_cf7_pdf_dashboard_html_page' function. This makhttps://patchthecve.com/cve/CVE-2024-37555.htmlhttps://patchthecve.com/cve/CVE-2024-37555.htmlWed, 17 Jun 2026 07:38:36 +0000CRITICAL 9.1: Unrestricted Upload of File with Dangerous Type vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7.This issue affects Generate PDF using Contact Form 7: from n/a through <= 4.1.2.