This vulnerability affects the Contact Form 7 GetResponse Extension by WEN Solutions, specifically versions up to 1.0.8. It allows an attacker to insert sensitive information into data sent by the extension, which can lead to the retrieval of embedded sensitive data. The CVSS vector indicates the vulnerability is remotely exploitable without privileges or user interaction, with low complexity and limited confidentiality impact. No official patch or remediation guidance is currently available.

An attacker can remotely exploit this vulnerability without authentication or user interaction to retrieve sensitive information embedded in the data sent by the vulnerable extension. The impact is limited to confidentiality, with no integrity or availability effects reported. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.