Input validation vulnerability in Contact Form 7 Database Addon – CFDB7 1.2.5.4

The Contact Form 7 Database Addon plugin for WordPress is vulnerable to a type of cyber attack called SQL Injection in versions up to and including 1.2.5.3. This type of attack allows someone to append additional malicious code to an existing query via the form_id parameter. If the attack is successful, the malicious code can be used to gain access to sensitive information from the database.