CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-10084

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic Information Disclosure in all versions up to, and including, 4.5 via the CF7_get_post_var shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract the titles and text contents of private and password-protected posts, they do not own.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.2%

CVSS Severity

CVSS v3 Score 4.3

References

Products affected by CVE-2024-10084

Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 1.0.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:1.0.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 1.0.2

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:1.0.2
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 1.0.3

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:1.0.3
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 1.0.4

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:1.0.4
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 1.0.4.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:1.0.4.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 1.0.4.2

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:1.0.4.2
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 1.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:1.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 1.1.0.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:1.1.0.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 1.1.0.2

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:1.1.0.2
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 1.2

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:1.2
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 2.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:2.0
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 2.0.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:2.0.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 2.0.2

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:2.0.2
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 2.0.2.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:2.0.2.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 2.0.3

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:2.0.3
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.0.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.0.0
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.1.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.1.0
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.1.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.1.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.1.2

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.1.2
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.1.3

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.1.3
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.2

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.2
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.3.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.3.0
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.4.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.4.0
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.5.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.5.0
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.5.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.5.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.5.2

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.5.2
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.5.3

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.5.3
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 3.5.4

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:3.5.4
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.0.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.0.0
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.0.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.0.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.0.2

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.0.2
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.0.3

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.0.3
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.1.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.1.0
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.2.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.2.0
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.2.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.2.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.2.2

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.2.2
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.2.3

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.2.3
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.3.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.3.0
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.3.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.3.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.4.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.4.0
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.4.1

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.4.1
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.4.2

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.4.2
Sevenspark » Contact Form 7 - Dynamic Text Extension » Version: 4.5.0

cpe:2.3:a:sevenspark:contact_form_7_-_dynamic_text_extension:4.5.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-10084

Products

Pricing

Contact Us