ZealousWeb WordPress Plugin Accept Authorize.NET Payments Vulnerability in Contact Form 7

A vulnerability allowing the insertion of sensitive information into sent data has been identified in the ZealousWeb WordPress plugin 'Accept Authorize.NET Payments Using Contact Form 7', affecting versions through 2.5. This vulnerability could allow unauthorized retrieval of embedded sensitive data, which is typically not accessible to regular users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, potentially allowing for further exploitation of other weaknesses in the system.

Remediation

Users of the 'Accept Authorize.NET Payments Using Contact Form 7' WordPress plugin should update to version 2.6 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.