Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
wpcf7-redirect
WordPress
· Plugin
19 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Redirection for Contact Form 7 < 3.2.16 - Missing Authorization
CVE-2026-121873
wpcf7-redirect
WordPress
Medium
Fix reported
2026-11-11
Redirection for Contact Form 7 <= 3.2.14 - Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File Copy via 'wpcf7-redirect' Parameter
CVE-2026-120659
wpcf7-redirect
WordPress
Medium
Fix reported
2026-11-06
Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-111574
wpcf7-redirect
WordPress
High
Fix reported
2026-10-23
Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution
CVE-2026-80439
wpcf7-redirect
WordPress
Medium
Fix reported
2026-09-09
Redirection for Contact Form 7 <= 3.2.8 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-23970
wpcf7-redirect
WordPress
High
Fix reported
2026-05-19
Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload
CVE-2025-14800
wpcf7-redirect
WordPress
High
Fix reported
2025-12-21
Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode
CVE-2025-9562
wpcf7-redirect
WordPress
Medium
Fix reported
2025-10-18
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion
CVE-2025-8141
wpcf7-redirect
WordPress
High
Fix reported
2025-08-20
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization
CVE-2025-8289
wpcf7-redirect
WordPress
High
Fix reported
2025-08-20
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection
CVE-2025-8145
wpcf7-redirect
WordPress
High
Fix reported
2025-08-20
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Post Deletion
CVE-2021-24281
wpcf7-redirect
WordPress
Medium
Fix reported
2024-01-22
Redirection for Contact Form 7 <= 2.3.3 - Unprotected AJAX Actions
CVE-2021-24282
wpcf7-redirect
WordPress
Medium
Fix reported
2024-01-22
Redirection for Contact Form 7 <= 2.9.2 - Missing Authorization
CVE-2023-39920
wpcf7-redirect
WordPress
Medium
Fix reported
2024-01-22
Redirection for Contact Form 7 <= 2.3.3 - Authenticated PHP Object Injection
CVE-2021-24280
wpcf7-redirect
WordPress
High
Fix reported
2024-01-22
Redirection for Contact Form 7 <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation
CVE-2021-24278
wpcf7-redirect
WordPress
High
Fix reported
2024-01-22
Redirection for Contact Form 7 <= 2.4.0 - Missing Authorization
CVE-2021-36913
wpcf7-redirect
WordPress
Medium
Fix reported
2024-01-22
Redirection for Contact Form 7 <= 2.4.0 - Reflected Cross-Site Scripting
CVE-2022-0250
wpcf7-redirect
WordPress
Medium
Fix reported
2024-01-22
Redirection for Contact Form 7 <= 2.7.0 - Authenticated(Editor+) Privilege Escalation
CVE-2023-23990
wpcf7-redirect
WordPress
High
Fix reported
2024-01-22
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Plugin Installation
CVE-2021-24279
wpcf7-redirect
WordPress
Medium
Fix reported
2024-01-22