Takayukiste, the author of the plugin, has released 1.9.5.1 fixing the vulnerability. If you have an old version of this plugin, it’s highly recommended that you update this plugin ASAP. You can read the discussion over on the WordPress.org forums here.

According to Jeff at the WPTavern, Contact Form 7 got a flaw in the programing to allow hackers and spammers to add content to the site without having the proper access. With that said, I have disabled my contact form at this time until the author can provide a patch/fix. Mark Jaquith, a WordPress developer, reported this flaw.

You can read the forum thread on WordPress.org here.

Since the day the blog was re-born I wanted a contact form. Yet here we are at least 8 months later and now we have one! Click on the Contact tab above! No comments.. email me! Now!