PT-2026-55012 · Vsourz Digital+1 · Advanced Contact Form 7 Db+1

Timomangcut

·

CVE-2026-57669

·

Published

2026-06-30

·

Updated

2026-07-02

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Advanced Contact form 7 DB versions prior to 2.1.0
Description The Advanced Contact form 7 DB plugin for WordPress contains a broken access control issue. A missing capability check in a function allows authenticated attackers with subscriber-level permissions or higher to perform unauthorized actions.
Recommendations Update the plugin to a version later than 2.0.9.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-57669

Affected Products

Advanced Contact Form 7 Db
Advanced-Cf7-Db