GHSA-355f-hgvp-6hq8
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via the cf7sa-info.php file that returns phpinfo() data. This makes it possible for unauthenticated attackers to extract configuration information that can be leveraged in another attack.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: June 25, 2025 8:46 PM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.