WordPress CF7 Submissions Plugin <= 0.26 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Denver Jackson in WordPress Plugin CF7 Submissions versions = 0.26...

CVE-2025-58016

CVE-2025-58016 affects CF7 Submissions (WordPress plugin). The vulnerability is Missing Authorization due to misconfigured access control levels, with a CVSS v3.1 base score of 4.3 (Medium) and an observation that exploitation could occur without user interaction. Connected documents confirm the ...