CVE-2024-10084

CVE-2024-10084 affects the WordPress plugin Contact Form 7 – Dynamic Text Extension . The issue is a Basic Information Disclosure via the CF7_get_post_var shortcode, allowing authenticated attackers with Contributor-level access or higher to exfiltrate the titles and text contents of private or p...

CVE-2024-10084: Exposure of Sensitive Information to an Unauthorized Actor

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic Information Disclosure in all versions up to, and including, 4.5 via the CF7getpostvar shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract the...