Now officially on WordPress.org

CVE Database / CVE-2025-22686

CVE · Medium

CVE-2025-22686 — GSheetConnector – CF7 Google Sheets Connector & Save CF7 Entries to Database [cf7-google-sheets-connector] < 5.0.18

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-22686 GSheetConnector – CF7 Google Sheets Connector & Save CF7 Entries to Database [cf7-google-sheets-connector] < 5.0.18 Missing Authorization Medium 5.3 < 5.0.18 5.0.18 2025-01-31 —

CVE-2025-22686

A security flaw exists within the CF7 Google Sheets Connector plugin for WordPress, allowing malicious individuals to bypass authentication checks when interacting with certain functions, which can be exploited in all versions prior to and including 5.0.17. This vulnerability enables unauthorized access to sensitive functionality.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings