https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T17:01:12.971505+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-10084 CVE-2024-10084 — Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode 2026-10-09T17:01:12.988981+00:00

Affected: sevenspark Contact Form 7 – Dynamic Text Extension

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic Information Disclosure in all versions up to, and including, 4.5 via the CF7_get_post_var shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract the titles and text contents of private and password-protected posts, they do not own.