Conditional Fields for Contact Form 7, 0bb038577e135241efdec5ee2901e7ead90280e7

CVE, Research URL: 0bb038577e135241efdec5ee2901e7ead90280e7
Home page URL: Security reports for Conditional Fields for Contact Form 7
Application: Conditional Fields for Contact Form 7
Published on: Nov 14, 2023
Research Description: Conditional Fields for Contact Form 7 [cf7-conditional-fields] < 2.4.1 (closed) Conditional Fields for Contact Form 7 <= 2.4.0 - Missing Authorization The Conditional Fields for Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when showing admin notices in all versions up to 2.4.0 (inclusive). This makes it possible for attackers to read admin notices.
Affected versions: max 2.4.1.
Status: vulnerable