Advisories · Technology
Redirection for Contact Form 7.
Every CVE that names Redirection for Contact Form 7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Redirection for Contact Form 7 2.6.0 - 3.2.15 - Unauthenticated Forged Personal Data Request Creation
- Redirection for Contact Form 7
- Broken access control
- CVSS 7.5 High
Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored XSS via Lead Debug Metabox
- Redirection for Contact Form 7
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution via Action Setting Mail-Tags
- Redirection for Contact Form 7
- Other injection
-
Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site Scripting
- Redirection for Contact Form 7
- Cross-site scripting (XSS)