Void Contact Form 7 Widget For Elementor Page Builder < 2.4 - Missing Authorization

Description

The Void Contact Form 7 Widget For Elementor Page Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX functions in the /helper/helper.php file in versions up to, and including, 2.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to dismiss notices and retrieve contact form data.