CVE-2021-24281

概要

参考情報

• wpscan.com/vulnerability/daf12b85-f5ad-4261-ab39-be6840ad3cdc · Exploit
• wordfence.com/blog/2021/04/severe-vulnerabilities-patched-in-redirection-for-contact-form-7-plugin · Exploit

redirection for contact form 7 のその他の脆弱性

• CVE-2021-24282中 6.3In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the various AJA…
• CVE-2021-24280高 8.8In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the import_from…
• CVE-2021-24279中 6.5In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the import_from_debug A…
• CVE-2021-24278高 7.5In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX action to retri…