CVE-2021-24280

概要

参考情報

• wpscan.com/vulnerability/db4ba6b0-887e-4ec1-8935-ab21d369b329 · Exploit
• wordfence.com/blog/2021/04/severe-vulnerabilities-patched-in-redirection-for-contact-form-7-plugin · Exploit

redirection for contact form 7 のその他の脆弱性

• CVE-2021-24282中 6.3In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the various AJA…
• CVE-2021-24281中 4.3In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the delete_acti…
• CVE-2021-24279中 6.5In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the import_from_debug A…
• CVE-2021-24278高 7.5In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX action to retri…