CVE-2021-36913

ALTO 7.5CVE-2021-36913 · Published 11/10/2022 · updated 17/06/2026

In breve

CVE-2021-36913 è una vulnerabilità ALTO (CVSS 7.5) che riguarda redirection for contact form 7 (redirection-for-contact-form7).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.72%, superiore al 54.1% delle vulnerabilità.
Correzione: aggiornare a 2.6.0 o successiva.

Package	Affected versions	Patched versions
redirection for contact form 7 redirection-for-contact-form7	`< 2.6.0`	`2.6.0`

Description

Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to change options and inject scripts into the footer HTML. Requires an additional extension (plugin) AccessiBe.

References

patchstack.com/database/vulnerability/wpcf7-redirect/wordpress-redirection-for-contact-form-7-plugin-2-4-0-unauthenticated-options-change-vulnerability · Third Party Advisory
wordpress.org/plugins/wpcf7-redirect · Product

Altre vulnerabilità di redirection for contact form 7

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free