CVE-2023-47838

The Conditional Fields for Contact Form 7 plugin before version 2.4.2 contains a broken access control vulnerability that allows unauthenticated or low-privileged users to perform actions restricted to higher-privilege accounts due to missing authorization checks and nonce verification. The flaw was discovered by Abdi Pranata and reported to the vendor, but no patch has been released and the vendor has not responded to the disclosure. This unpatched vulnerability remains unfixed in affected installations.

Based on public CVE data (MITRE/NVD).