PT-2024-27399

Name of the Vulnerable Software and Affected Versions Advanced Contact form 7 DB plugin for WordPress versions up to, and including, 2.0.2 Description The issue allows unauthenticated attackers to extract sensitive data uploaded via the plugin through a form, due to Sensitive Information Exposure...

CVE-2024-3723: Insecure Storage of Sensitive Information

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.2 via the wp-content/uploads/advanced-cf7-upload directory. This makes it possible for unauthenticated attackers to extract sensitive data uploaded via thi...