Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-49988 EUVD-2025-28341GHSA-9xmx-x5ww-xmxj

WordPress Contact Form 7 AWeber Extension plugin <= 0.1.40 - Broken Access Control vulnerability

Published Jun 20, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Renzo Johnson Contact Form 7 AWeber Extension integrate-contact-form-7-and-aweber allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form 7 AWeber Extension: from n/a through <= 0.1.40.

Affected products

VendorProductAffectedFixed
Renzo Johnson Contact Form 7 AWeber Extension ≤ 0.1.40 —

References