Read the docs

Redirection-for-contact-form7

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Redirection-for-contact-form7 records in CISA KEV

No Redirection-for-contact-form7 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Redirection For Contact Form 7 2 records LOW

Records

2 records

TI-2021-14994 CVE-2021-36913 · GHSA-7fvf-jrqc-p27w

Redirection for Contact Form 7 <= 2.4.0 - Unauthenticated Options Change and Content Injection vulnerability

Priority LOW 34

Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to change options and inject scripts into the footer HTML.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0072 Published 2022-10-11 No fix listed CWE-284
TI-2022-00185 CVE-2022-0250 · GHSA-qrcp-h79f-78w4

Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site Scripting

Priority LOW 31

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01645 Published 2022-07-04 Fixed in 2.5.0 CWE-79
Open these records in search →