High · 7.5 CVE-2026-59534 EUVD-2026-49210GHSA-g97q-wqwj-3cqh

WordPress Post My CF7 Form plugin <= 6.2.0 - Broken Access Control vulnerability

Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack

Vendor: Aurovrata Venet Product: Post My CF7 Form

Description

Unauthenticated Broken Access Control in Post My CF7 Form <= 6.2.0 versions.

Affected products

Vendor	Product	Affected	Fixed
Aurovrata Venet	Post My CF7 Form	≤ 6.2.0	—

References

https://patchstack.com/database/wordpress/plugin/post-my-contact-form-7/vulnerability/wordpress-post-my-cf7-form-plugin-6-2-0-broken-access-control-vulnerability?_s_id=cve vdb-entry