CVE-2026-62043

Summary

Contact Form 7 Dynamic Text Extension allows unauthenticated users to access sensitive data through a vulnerable contact form endpoint, potentially exposing personal information like names, emails, and custom field values without requiring authentication or any user interaction.

Exploitability

Exploitation is straightforward with no prerequisites as the vulnerability affects unauthenticated access to sensitive data exposed via the dynamic text extension's API endpoint.

Blast radius

The impact could be significant across all websites using Contact Form 7 Dynamic Text Extension versions 5.0.7 or earlier, potentially exposing personal information from contact forms including user details and custom form fields.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Contact Form 7 Dynamic Text Extension version 5.0.8 or later to remediate this sensitive data exposure vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.