{
 "id": "WPSEC-2026-2254",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2254/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2254/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2254/index.md",
 "title": "Contact Form 7 Add Password field <= 5.3.0 - Unauthenticated Sensitive Information Exposure via specific_password_check Option",
 "description": "The Add Password Field for Contact Form 7 plugin for WordPress is vulnerable to Sensitive Information Exposure via the specific_password_check form-tag option in versions 3.3 up to, and including, 5.3.0, due to the [password] form-tag handler rendering the specific_password_check value, the list of passwords that submissions are checked against, as an HTML attribute of the public input field. This makes it possible for unauthenticated attackers to read the expected passwords from the page source of any form that uses the specific_password_check option and pass the password check it is meant to enforce.",
 "plugin": {
  "slug": "cf7-add-password-field",
  "name": "Contact Form 7 Add Password field",
  "full_name": "Add Password Field for Contact Form 7",
  "wordpress_org": "https://wordpress.org/plugins/cf7-add-password-field/",
  "advisories_url": "https://wpsec.com/vuln/plugin/cf7-add-password-field/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/cf7-add-password-field"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": "3.3",
    "from_inclusive": true,
    "to": "5.3.1",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 3.3 before 5.3.1"
  ]
 },
 "introduced_in": "3.3",
 "fixed_in": "5.3.1",
 "remediation": "Update to 5.3.1 or later.",
 "fix_released": "2026-11-01T11:42:01+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:21:45.123053+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2254/",
  "https://plugins.svn.wordpress.org/cf7-add-password-field/tags/5.3.1/",
  "https://wordpress.org/plugins/cf7-add-password-field/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/cf7-add-password-field",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-11-03"
 }
}