CVE-2023-44989: 
WordPress vulnerability analysis and mitigation

The CF7 Google Sheets Connector WordPress plugin version 5.0.5 and earlier was found to contain a sensitive data exposure vulnerability. The issue was discovered by Joshua Chan and was disclosed on November 30, 2023. This vulnerability was assigned CVE-2023-44989 and affects the debug log functionality of the plugin (Patchstack).

The vulnerability has been assigned a CVSS score of 7.5, indicating a moderate to high severity. The issue is related to the insertion of sensitive information into log files, specifically affecting the debug log functionality of the plugin. The vulnerability can be exploited without authentication, as indicated by the CVSS vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (Patchstack).

This vulnerability could allow malicious actors to view sensitive information that is normally not accessible to regular users. The exposed information could potentially be used to exploit other weaknesses in the system (Patchstack).

The vulnerability can be exploited by unauthenticated users, making it particularly concerning. However, it has been classified as having a low priority for exploitation despite its high CVSS score (Patchstack).

The vulnerability has been fixed in version 5.0.6 of the CF7 Google Sheets Connector plugin. Users are advised to update to version 5.0.6 or later to remediate this security issue (Patchstack).