CVE-2025-62915

CVE-2025-62915 concerns a Missing Authorization vulnerability in the WordPress plugin SMS Contact Form 7 Notifications by ClickSend (clicksend-contactform7). The issue arises from incorrectly configured access control security levels, affecting versions up to and including 1.4.0. CVSS 3.1 base sc...

PT-2025-43792

Name of the Vulnerable Software and Affected Versions ClickSend SMS Contact Form 7 Notifications versions through 1.4.0 Description An authorization issue exists in ClickSend SMS Contact Form 7 Notifications. The issue involves incorrectly configured access control security levels, potentially...

WordPress SMS Contact Form 7 Notifications by ClickSend plugin <= 1.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin SMS Contact Form 7 Notifications by ClickSend versions = 1.4.0...