CVE-2026-81300

The vulnerability allows unauthenticated attackers to exploit a Cross Site Scripting (XSS) flaw in Calculation For Contact Form 7 versions 1.0 and earlier, potentially leading to the execution of arbitrary scripts in the context of a user's session. This can compromise user data and session integrity, making it critical for organizations using this plugin to prioritize remediation. Web developers and administrators managing sites with this plugin should take immediate action to update or mitigate the risk.