CVE-2026-24557
BaseFortify
Publication date: 2026-01-23
Last updated on: 2026-01-26
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| wen_solutions | contact_form_7_getresponse_extension | to 1.0.8 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-201 | The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Contact Form 7 GetResponse Extension Plugin allows unauthenticated attackers to retrieve sensitive information that is normally protected. It is a Sensitive Data Exposure issue affecting versions up to 1.0.8, potentially enabling attackers to access embedded sensitive data within sent data. [1]
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to sensitive information, which may result in further exploitation of other system weaknesses. Although the severity is considered low (CVSS 5.3), it still poses a risk of sensitive data exposure that could compromise privacy or security. [1]
What immediate steps should I take to mitigate this vulnerability?
Since no official fix or patched version is currently available for this vulnerability, immediate mitigation steps include monitoring for unauthorized access attempts and limiting exposure of the Contact Form 7 GetResponse Extension plugin. Consider disabling or removing the plugin until a patch is released to prevent sensitive data exposure. [1]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability allows unauthenticated attackers to access sensitive information that is normally restricted, which could lead to non-compliance with data protection standards and regulations such as GDPR and HIPAA that require safeguarding sensitive data. Exposure of sensitive data may result in violations of these regulations, potentially leading to legal and financial consequences. [1]