CVE-2017-1002007

Name of the Vulnerable Software and Affected Versions DTracker version 1.5

Description The issue concerns a lack of authorization check in the code, specifically in the dtracker/save mail.php file, which allows unauthorized injection of new contacts into the wp contact table.

Recommendations For DTracker version 1.5, consider temporarily restricting access to the dtracker/save mail.php file until a patch is available, and ensure that proper authorization checks are implemented to prevent unauthorized modifications to the wp contact table.