Contact Form 7 version 6.2.5 is now available. This is a minor update release that includes security fixes and enhancements. The risk level is not high, but it’s about security, so we advise you all to update soon.
Continue reading Contact Form 7 6.2.5Category Archives: Security
Contact Form 7 6.2.4
Contact Form 7 version 6.2.4 is now available. This is a minor update release that includes several security fixes and enhancements. While the vulnerability is seen only in Contact Form 7 6.2 to 6.2.3, since the security enhancements apply to all versions of the plugin, we recommend upgrading to 6.2.4 for all users.
Continue reading Contact Form 7 6.2.4Contact Form 7 6.1.5
Contact Form 7 version 6.1.5 is now available. This is a minor update release including a security fix. We recommend all users upgrade as soon as possible.
Continue reading Contact Form 7 6.1.5Contact Form 7 6.1.1
Contact Form 7 version 6.1.1 is now available. This minor update release includes several improvements, bug fixes, and security enhancements.
Continue reading Contact Form 7 6.1.1Contact Form 7 6.0.6
Contact Form 7 version 6.0.6 is now available. This minor update release includes some security enhancements, and is confirmed to work with WordPress 6.8.
Continue reading Contact Form 7 6.0.6Avast false alarm again
Today I saw a lot of Contact Form 7 users reporting that the security software they use had detected a Trojan Horse in a script file in the Contact Form 7 package. I scanned the reported file on the WordPress.org plugin directory and found no problem, so I concluded that this is a false alarm.
The security software is provided by Avast Software. According to the reports from users, several other security applications from Avast’s group of companies showed the same alert. Avast is known to have caused a similar false alarm case that happened in 2021.
Contact Form 7 5.9.5
Contact Form 7 version 5.9.5 is now available. This minor update release includes a few improvements and security enhancements. Upgrading to this version as soon as possible is recommended.
Continue reading Contact Form 7 5.9.5Contact Form 7 5.9.2
Contact Form 7 version 5.9.2 is now available. This minor update release includes a security fix to address a medium severity Reflected Cross-Site Scripting vulnerability issue reported by Wordfence researcher Asaf Mozes. It also contains several other bug fixes and improvements. Upgrade to 5.9.2 as soon as possible.
Continue reading Contact Form 7 5.9.2Contact Form 7 5.8.4
Contact Form 7 version 5.8.4 is now available. This minor update release addresses a medium severity security issue recently reported.
Continue reading Contact Form 7 5.8.4Warning against the use of vulnerable add-on plugins
You can find so many add-on plugins for Contact Form 7 on the Internet. You might also assume that they have an affiliation with or are certified by the developers of Contact Form 7, but that’s not true. They are third-party products that have nothing to do with the Contact Form 7 project.
We don’t recommend any of them. In reality, some of them are known to have severe security vulnerabilities, so we strongly advise you to avoid using them.
Continue reading Warning against the use of vulnerable add-on plugins