{"id":"CVE-2026-84254","published":"2026-10-11T07:17:25.180","lastModified":"2026-10-13T20:36:00.850","description":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/1dbb03eb-97ba-4a0f-aeea-6a38a47c95e5/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The click5 CRM add-on for Contact Form 7 plugin lacks proper authorization and CSRF protection when updating options through its REST endpoint, allowing unauthenticated attackers to modify arbitrary blog settings and create administrator accounts for complete site takeover.","exploitability":"Exploitation is straightforward with no prerequisites, as the vulnerability allows unauthenticated attackers to directly modify any blog option through a known REST endpoint.","blast_radius":"The impact could be severe across all affected WordPress sites using Contact Form 7 plugin version 1.0.4 or earlier with the click5 CRM add-on installed, potentially leading to complete site compromise and unauthorized administrative access.","remediation":"Upgrade to Contact Form 7 plugin version 1.0.5 or later which includes proper authorization and CSRF checks for the click5 CRM add-on REST endpoint.","detection":"Monitor for unusual REST API requests to /wp-json/cf7crm/v1/options endpoint with elevated privileges, particularly those modifying core WordPress options like wp_options table entries related to user roles or authentication settings.","tags":["auth-bypass","rest-api","wp-plugin","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:50:44.050Z"}}