CVE-2026-73384CWE-201

CVE-2026-73384

High · published August 19, 2026

CVSS v3.1

7.5

EPSS

0%

Percentile

34.8

In the wild

Unconfirmed

What it is

Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00416 · 34.8th percentile
Weakness: CWE-201 · Insertion of Sensitive Information Into Sent Data
Published: 2026-08-19T17:18Z

References (1)

https://patchstack.com/database/wordpress/plugin/pay-with-contact-form-7/vulnerability/wordpress-pay-with-contact-form-7-plugin-1-0-4-sensitive-data-exposure-vulnerability?_s_id=cve · [email protected]

EPSS history

Timeline

19 AUG 12:38Z
WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
cvelistv5