Kofimokome develops a focused WordPress plugin, Message Filter for Contact Form 7, that handles user input in web forms and contact workflows. The vulnerability profile centers on application-layer input-handling weaknesses, particularly cross-site scripting and SQL injection flaws inherent to form-processing context.
The number and severity of CVEs published that impact products developed by Kofimokome over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-57423HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter allows Reflec | Jul 13, 2026 | 7.1 | 32 | NO | NO |
CVE-2026-65438HIGH Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 versions. | Jul 27, 2026 | 7.1 | 31 | NO | NO |
CVE-2025-46252HIGH Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter allows SQL In | Apr 22, 2025 | 7.2 | 22 | NO | NO |
CVE-2024-39647MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter.This issue af | Aug 1, 2024 | 6.1 | 19 | NO | NO |
CVE-2024-54254MEDIUM Missing Authorization vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter.This issue affects Message Filter for Contact Form 7: from n/a through <= 1. | Dec 9, 2024 | 6.3 | 18 | NO | NO |
CVE-2024-12026MEDIUM The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveFilter() function in all | Dec 7, 2024 | 4.3 | 15 | NO | NO |
CVE-2024-12027MEDIUM The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updateFilter() and deleteFilt | Dec 6, 2024 | 4.3 | 15 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Kofimokome.
Media articles that mention a CVE ID that affects a product developed by Kofimokome — matched by CVE ID, not by vendor name.