Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 2 vulnerability records associated with Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms, published between 2025 and 2025.

Dataset last synchronized: 2026-08-02 09:41:47 UTC

At a glance

Security Snapshot

2Total records
1Critical
0High
1Medium
0Low
0Informational
2Patched records
0Currently marked unpatched
2025-03-27First disclosure
2025-07-18Latest disclosure
2 of 2CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202522 records

Severity Breakdown

SeverityRecordsShare
Critical150%
Medium150%

Vulnerability-Type Breakdown

CSRF

1 record50%

First: 2025. Latest: 2025.

Other

1 record50%

First: 2025. Latest: 2025.

Patch Status

Patched
2
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 1.1.2
  • 1.1.0

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-1.1.1Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val FunctionJuly 18, 20251.1.2Critical
*-1.0.9Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.0.9 - Cross-Site Request ForgeryMarch 27, 20251.1.0Medium

Selected source records

Latest Records

CriticalCVE-2025-7697

Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function

Published: July 18, 2025

Affected versions
*-1.1.1
Patched versions
1.1.2
Original Wordfence record
MediumCVE-2025-30863

Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.0.9 - Cross-Site Request Forgery

Published: March 27, 2025

Affected versions
*-1.0.9
Patched versions
1.1.0
Original Wordfence record

Highest-Severity Records

CriticalCVE-2025-7697

Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function

Published: July 18, 2025

Affected versions
*-1.1.1
Patched versions
1.1.2
Original Wordfence record
MediumCVE-2025-30863

Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.0.9 - Cross-Site Request Forgery

Published: March 27, 2025

Affected versions
*-1.0.9
Patched versions
1.1.0
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory