description: Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_mail.php doesn't check that the user is authorized before injecting new contacts into the wp_contact table.
problem types: Content Injection
affected:
{
product: DTracker
vendor: ITFlux
versions:
lessThan: 1.5, status: affected, version: unspecified, versionType: custom
}