redirection for contact form 7 vulnerabilities and fixes
Recent CVEs affecting redirection for contact form 7, with upgrade or downgrade steps. 7 tracked.
Also searched as: redirectionforcontactform7.
redirection for contact form 7 has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2022-10-11. Highest priority: CVE-2021-24278 (score 60/100).
- CVE-2022-0250 MEDIUM 6.1 UPGRADE The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outpu
- CVE-2021-36913 HIGH 7.5 UPGRADE Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7
- CVE-2021-24282 MEDIUM 6.3 UPGRADE In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscri
- CVE-2021-24281 MEDIUM 4.3 UPGRADE In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscri
- CVE-2021-24280 HIGH 8.8 UPGRADE In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscri
- CVE-2021-24279 MEDIUM 6.5 UPGRADE In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, cou
- CVE-2021-24278 HIGH 7.5 UPGRADE In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_
FAQ
How do I fix redirection for contact form 7 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is redirection for contact form 7 being exploited right now?
None of the tracked redirection for contact form 7 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which redirection for contact form 7 CVE should I patch first?
CVE-2021-24278 currently ranks highest (60/100): In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_.
RSS feed for redirection for contact form 7 · ← Back to latest CVEs