CVE-2026-62043: WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability

Q: Who can exploit this issue?

The issue is described as unauthenticated, so exploitation does not require a WordPress account or other prior privileges.

Q: What level of access does exploitation require?

The vector is network-based with low attack complexity and requires no user interaction, indicating an attacker can attempt exploitation remotely without persuading a user to act.

Q: What is the likely security impact?

The listed impact is high confidentiality impact, while integrity and availability impacts are listed as none. The primary concern is exposure of sensitive information rather than modification of site content or service disruption.

Q: Which plugin versions are affected?

The vulnerability is reported in Contact Form 7 – Dynamic Text Extension versions 5.0.7 and earlier.

Published Oct 10, 2026

Updated

Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.

Affected Software

1 affected component

WordPress Contact Form 7 – Dynamic Text Extension<=5.0.7

Event History

Oct 10, 2026

CVE Published

via MITRE·07:35 PM

Data Sourced

via MITRE·07:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is described as unauthenticated, so exploitation does not require a WordPress account or other prior privileges.

What level of access does exploitation require?

The vector is network-based with low attack complexity and requires no user interaction, indicating an attacker can attempt exploitation remotely without persuading a user to act.

What is the likely security impact?

The listed impact is high confidentiality impact, while integrity and availability impacts are listed as none. The primary concern is exposure of sensitive information rather than modification of site content or service disruption.

Which plugin versions are affected?

The vulnerability is reported in Contact Form 7 – Dynamic Text Extension versions 5.0.7 and earlier.

CVE-2026-62043: WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What level of access does exploitation require?

What is the likely security impact?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What level of access does exploitation require?

What is the likely security impact?

Which plugin versions are affected?