Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Redirection-for-contact-form7 Clear all filters
TI-2021-14994 CVE-2021-36913 · GHSA-7fvf-jrqc-p27w

Redirection for Contact Form 7 <= 2.4.0 - Unauthenticated Options Change and Content Injection vulnerability

Priority LOW 34

Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to change options and inject scripts into the footer HTML.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0072 Published 2022-10-11 No fix listed CWE-284
TI-2022-00185 CVE-2022-0250 · GHSA-qrcp-h79f-78w4

Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site Scripting

Priority LOW 31

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01645 Published 2022-07-04 Fixed in 2.5.0 CWE-79