CVE-2025-46252

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kofi Mokome Message Filter for Contact Form 7 allows SQL Injection. This issue affects Message Filter for Contact Form 7: from n/a through 1.6.3.2.

Score

CVSS 3.1 7.6 High

Status

Modified - audit@patchstack.com

Published

2025-04-22

Last modified

2026-08-24

Weaknesses

CWE-89

Affected products

• Message Filter For Contact Form 7 (Kofi Mokome)
• Message Filter For Contact Form 7 (Kofimokome)

References

• https://patchstack.com/database/wordpress/plugin/cf7-message-filter/vulnerability/wordpress-message-filter-for-contact-…