Reflected Cross-Site Scripting (XSS) vulnerability discovered by Jeremie Amsellem in WordPress IDPay for Contact Form 7 plugin (versions <= 2.1.2).
Deactivate and delete. This plugin has been closed as of November 23, 2021 and is not available for download. Reason: Security Issue.