CVE-2021-24279

概要

参考情報

• wpscan.com/vulnerability/75f7690d-7f6b-48a8-a9d1-95578a657920 · Exploit
• wordfence.com/blog/2021/04/severe-vulnerabilities-patched-in-redirection-for-contact-form-7-plugin · Exploit

redirection for contact form 7 のその他の脆弱性

• CVE-2021-24282中 6.3In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the various AJA…
• CVE-2021-24281中 4.3In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the delete_acti…
• CVE-2021-24280高 8.8In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the import_from…
• CVE-2021-24278高 7.5In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX action to retri…