WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Dynamic Text Field For Contact Form 7

Add Fields Dynamically Contact Form 7 With it you can access a lot of post information e.g. title, slug, URL, ID, and even custom fields with shortco …

1Reported vulnerabilities
6.4Highest CVSS score
1.0Latest version
1,000+Active installs

What to do now

Update Dynamic Text Field For Contact Form 7 to 1.1 or later. 1 of these have a fixed version available. Updating resolves them.

Plugin last updated: January 31, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-58989 Medium 6.4 0.2% 1.0 and earlier 1.1 September 9, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.