CVE-2026-39731

An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Database for CF7 versions prior to 1.2.6, allowing attackers to inject malicious scripts that could compromise user sessions or manipulate web content. Organizations using this plugin should prioritize patching to mitigate potential exploitation risks, especially those handling sensitive user data.