CVE-2025-12825 - User Registration Using Contact Form 7 <= 2.5 - authenticated (subscriber+) info...

CVE ID : CVE-2025-12825 Published : Jan. 17, 2026, 5:16 a.m. | 1 hour, 11 minutes ago Description : The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_cf7_form_data' function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to retrieve form settings which includes Facebook app secrets. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...