CVE-2023-44989 - CVE House

Status published High CVE-2023-44989

WordPress CF7 Google Sheets Connector plugin <= 5.0.5 - Sensitive Data Exposure via Debug Log vulnerability

7.5 CVSS

Vulnerability Description

Insertion of Sensitive Information into Log File vulnerability in GSheetConnector CF7 Google Sheets Connector.This issue affects CF7 Google Sheets Connector: from n/a through 5.0.5.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-44989

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Joshua Chan (Patchstack Alliance)

References

https://patchstack.com/database/vulnerability/cf7-google-sheets-connector/wordpress-cf7-google-sheets-connector-plugin-5-0-5-sensitive-data-exposure-via-debug-log-vulnerability?_s_id=cve

Affected Vendor

GSheetConnector

View all reports →

Affected Software

CF7 Google Sheets Connector

Vulnerable Versions:

Unknown

Timeline

Official Publish: March 26th, 2024

Last Modified: April 28th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-532

MITRE ATT&CK TTPs

T1005 Data from Local System

Collection

T1552 Unsecured Credentials

Credential Access

T1555 Credentials from Password Stores