User Registration Using Contact Form 7 WordPress Plugin Unauthorized Data Access Vulnerability

A vulnerability exists in the User Registration Using Contact Form 7 plugin for WordPress, in all versions through 2.5. The issue arises from a missing capability check in the 'get_cf7_form_data' function, allowing unauthorized users to access form settings, including sensitive information such as Facebook app secrets.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive form data, including Facebook app secrets.

Remediation

Users can update to version 2.6 or a newer patched version to address this vulnerability.