Approved changes feed: RSS · Atom

cpe:2.3:a:westerndeal:gsheetconnector_for_cf7_–_connect_contact_form_7_to_google_sheets_and_send_form_submissions_in_real_time:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWesterndeal (d74621e5-4f3e-5b60-a78e-f7c9b24ebdb9)
ProductGsheetconnector For Cf7 – Connect Contact Form 7 To Google Sheets And Send Form Submissions In Real Time (57a64ab4-113e-55f4-a191-e6a410c7251c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5654 vulnerable 2026-06-08 06:56:16.882538 CF7 Google Sheets Connector <= 5.0.9 - Missing Authorization to Limited Site Configuration Update
MEDIUM (6.5)
The CF7 Google Sheets Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'execute_post_data_cg7_free' function in all versions up to, and including, 5.0.9. This makes it possible for unauthenticated attackers to toggle site configuration settings, including WP_DEBUG, WP_DEBUG_LOG, SCRIPT_DEBUG, and SAVEQUERIES.
Published: 2024-06-08T08:39:38.552Z
Updated: 2026-04-08T17:19:43.382Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.