This vulnerability in the CRM Perks Integration for Contact Form 7 HubSpot plugin (up to version 1.4.3) allows an attacker to insert sensitive information into data sent by the plugin, enabling retrieval of embedded sensitive data. The CVSS score is 5.3 (medium severity) with an attack vector over the network, no privileges required, and no user interaction needed. The issue affects the confidentiality of data but does not impact integrity or availability. No official patch or remediation details are currently available.

The vulnerability can lead to unauthorized disclosure of sensitive information embedded in data sent by the affected plugin. There is no indication of impact on data integrity or system availability. No known exploits have been reported, so the immediate risk may be limited but the exposure of sensitive data is a concern.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting exposure by restricting access to the affected plugin or disabling it if feasible. Monitor vendor channels for updates.