Redirection for Contact Form 7 vulnerabilities
We track 1 vulnerability in Redirection for Contact Form 7 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Redirection for Contact Form 7 vulnerabilities
- 7.5 High severity
Redirection for Contact Form 7: Improper Neutralization of Input During Web Page Generation
The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanitise or escape submitted form data stored as lead entries before outputting it in the lead debug metabox, allowing unauthenticated attackers to store a malicious script that execute