Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Accept PayPal Payments using Contact Form 7 4.0.7 Clear all filters
TI-2026-70273 CVE-2026-105990 · GHSA-gg38-hc35-5qm5

Unauthenticated export exposes form submissions in Accept PayPal Payments

Priority LOW 30

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the persona…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00251 Published 2026-10-10 Fixed in 4.0.7 CWE-200
TI-2026-70272 CVE-2026-105989 · GHSA-29vq-ff64-7939

Missing authorization in Accept PayPal Payments using Contact Form 7

Priority LOW 29

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the st…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00215 Published 2026-10-10 Fixed in 4.0.7 CWE-862