CVE-2026-105990
Accept PayPal Payments Using Contact Form 7 < 4.0.7 - Unauthenticated PII Disclosure via CSV Export
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data (name, email, telephone, postal address, message) and payment metadata of everyone who submitted a payment form.
| Vendor | unknown |
| Product | accept paypal payments using contact form 7 |
| Published | Oct 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown accept paypal payments using contact form 7
Be the first to know when new unknown vulnerabilities affecting unknown accept paypal payments using contact form 7 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Accept PayPal Payments using Contact Form 7
0 < 4.0.7
References
Credits
Enrico Marcolini Claudio Marchesini Dottor Marc WPScan