PT-2026-57722 · WordPress · Aman Cf7 Views

Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-57411

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Aman CF7 Views versions prior to 3.2.3

Description A DOM-Based Cross-site Scripting (XSS) issue exists due to improper neutralization of input during web page generation. This allows stored scripts to execute within the user's browser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Disable or replace the plugin immediately.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-57411

Affected Products

Aman Cf7 Views

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-57411 · Security Note
• https://twitter.com/HugoValters/status/2076650329387446661 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/cf7-views/vulnerability/wordpress-cf7-views-complete-entry-management-for-contact-form-7-plugin-3-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/f1tym1/status/2076723236021125521 · Twitter Post