CVE-2024-5654

CVE-2024-5654 affects the CF7 Google Sheets Connector plugin for WordPress, in all versions up to and including 5.0.9. The root cause is a missing capability check on the execute_post_data_cg7_free function, enabling unauthenticated attackers to modify site configuration settings (e.g., WP_DEBUG,...

CVE-2023-2320

CVE-2023-2320 applies to CF7 Google Sheets Connector plugins for WordPress (standard and Pro) before 5.0.2. The issue is a failure to escape a parameter before echoing it into an attribute, causing a reflected XSS that could target admin-level users. Impact per sources: reflected cross-site scrip...