Accept Authorize.NET Payments Using Contact Form 7, CVE-2024-12250

CVE, Research URL: CVE-2024-12250
Home page URL: Security reports for Accept Authorize.NET Payments Using Contact Form 7
Application: Accept Authorize.NET Payments Using Contact Form 7
Published on: Dec 18, 2024
Research Description: The Accept Authorize.NET Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2 via the cf7adn-info.php file. This makes it possible for unauthenticated attackers to extract configuration data which can be used to aid in other attacks.
Affected versions: max 2.3.
Status: vulnerable