Threats tagged 'ghsa-pr98-p8v8-r94g'

The Contact Form 7 AWeber Extension plugin for WordPress contains a vulnerability in all versions up to and including 0.1.42. The issue arises from a missing capability check on the 'wp_ajax_aweber_logreset' AJAX endpoint, allowing authenticated users with Subscriber-level access or higher to reset AWeber logs without proper authorization.