CVE-2026-73386

Versions of the Track Geolocation Of Users plugin for Contact Form 7 prior to 3.0.2 are vulnerable to unauthenticated sensitive data exposure, allowing attackers to access potentially sensitive user information without authentication. This vulnerability poses a significant risk to user privacy and data integrity, making it critical for web administrators using this plugin to prioritize updates to mitigate potential exploitation. Organizations that rely on this plugin for user interactions should take immediate action to secure their systems.