All products

wpcf7-redirect

WordPress · Plugin
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Redirection for Contact Form 7 < 3.2.16 - Missing AuthorizationCVE-2026-121873 wpcf7-redirect WordPress Medium Fix reported
Redirection for Contact Form 7 <= 3.2.14 - Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File Copy via 'wpcf7-redirect' ParameterCVE-2026-120659 wpcf7-redirect WordPress Medium Fix reported
Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-111574 wpcf7-redirect WordPress High Fix reported
Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2026-80439 wpcf7-redirect WordPress Medium Fix reported
Redirection for Contact Form 7 <= 3.2.8 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-23970 wpcf7-redirect WordPress High Fix reported
Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_uploadCVE-2025-14800 wpcf7-redirect WordPress High Fix reported
Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date ShortcodeCVE-2025-9562 wpcf7-redirect WordPress Medium Fix reported
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File DeletionCVE-2025-8141 wpcf7-redirect WordPress High Fix reported
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR DeserializationCVE-2025-8289 wpcf7-redirect WordPress High Fix reported
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object InjectionCVE-2025-8145 wpcf7-redirect WordPress High Fix reported
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Post DeletionCVE-2021-24281 wpcf7-redirect WordPress Medium Fix reported
Redirection for Contact Form 7 <= 2.3.3 - Unprotected AJAX ActionsCVE-2021-24282 wpcf7-redirect WordPress Medium Fix reported
Redirection for Contact Form 7 <= 2.9.2 - Missing AuthorizationCVE-2023-39920 wpcf7-redirect WordPress Medium Fix reported
Redirection for Contact Form 7 <= 2.3.3 - Authenticated PHP Object InjectionCVE-2021-24280 wpcf7-redirect WordPress High Fix reported
Redirection for Contact Form 7 <= 2.3.3 - Unauthenticated Arbitrary Nonce GenerationCVE-2021-24278 wpcf7-redirect WordPress High Fix reported
Redirection for Contact Form 7 <= 2.4.0 - Missing AuthorizationCVE-2021-36913 wpcf7-redirect WordPress Medium Fix reported
Redirection for Contact Form 7 <= 2.4.0 - Reflected Cross-Site ScriptingCVE-2022-0250 wpcf7-redirect WordPress Medium Fix reported
Redirection for Contact Form 7 <= 2.7.0 - Authenticated(Editor+) Privilege EscalationCVE-2023-23990 wpcf7-redirect WordPress High Fix reported
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Plugin InstallationCVE-2021-24279 wpcf7-redirect WordPress Medium Fix reported