2 matches found
EUVD-2026-3149
The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getcf7formdata' function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to retrieve form settings...
5.3CVSS4.9AI score0.00614EPSS
SaveExploits0References3
CVE-2025-12825: Missing Authorization
The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getcf7formdata' function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to retrieve form settings...
5.3CVSS5.7AI score0.00614EPSS
SaveExploits0References1
20