Post My Cf7 Form
Monthly
An unauthenticated broken access control flaw in the Post My CF7 Form WordPress plugin up to version 6.2.0 allows remote attackers to modify data handled by the plugin. No active exploitation has been confirmed and no public exploit code is known at the time of analysis; however, the vulnerability is trivial to exploit due to its network accessibility and lack of required privileges.
An unauthenticated broken access control flaw in the Post My CF7 Form WordPress plugin up to version 6.2.0 allows remote attackers to modify data handled by the plugin. No active exploitation has been confirmed and no public exploit code is known at the time of analysis; however, the vulnerability is trivial to exploit due to its network accessibility and lack of required privileges.