Access violation vulnerability in Contact Form 7 AWeber Extension 0.1.42

The Contact Form 7 AWeber Extension plugin for WordPress has a security issue that could allow unauthorized changes to be made to data. This is because the plugin does not have a check in place to verify the user’s permissions when using the ‘wp_ajax_aweber_logreset’ feature. This vulnerability exists in all versions of the plugin up to and including 0.1.42. As a result, attackers who have logged in and have at least Subscriber-level access can reset the AWeber logs without proper authorization.