Medium · 5.3 CVE-2024-44019 EUVD-2024-40801GHSA-m6wr-8w28-2r5p

WordPress Contact Form 7 Campaign Monitor Extension plugin <= 0.4.67 - Arbitrary File Deletion vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Renzo Johnson Product: Contact Form 7 Campaign Monitor Extension

Description

Missing Authorization vulnerability in Renzo Johnson Contact Form 7 Campaign Monitor Extension contact-form-7-campaign-monitor-extension.This issue affects Contact Form 7 Campaign Monitor Extension: from n/a through <= 0.4.67.

Affected products

Vendor	Product	Affected	Fixed
Renzo Johnson	Contact Form 7 Campaign Monitor Extension	≤ 0.4.67	—

References

https://patchstack.com/database/Wordpress/Plugin/contact-form-7-campaign-monitor-extension/vulnerability/wordpress-contact-form-7-campaign-monitor-extension-plugin-0-4-67-arbitrary-file-deletion-vulnerability?_s_id=cve vdb-entry