Redirection for Contact Form 7 vulnerabilities
5 known vulnerabilities in Redirection for Contact Form 7 from ThemeIsle. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Redirection for Contact Form 7: Unrestricted Upload of File with Dangerous Type
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'move_file_to_upload' function in all versions up to, and including, 3.2.7. This makes it possible for unauthenticated at
- 7.5 High severity
Redirection for Contact Form 7: Deserialization of Untrusted Data
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input in the delete_associated_files function. This makes it possible for unauthenticated
- 8.8 High severity
Redirection for Contact Form 7: Deserialization of Untrusted Data
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input in the get_lead_fields function. This makes it possible for unauthenticated attacke
- 8.8 High severity
Redirection for Contact Form 7: Improper Limitation of a Pathname to a Restricted Directory
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_associated_files function in all versions up to, and including, 3.2.4. This makes it possible for unauthenti
- 7.5 High severity
Redirection for Contact Form 7: Missing Authorization
Missing Authorization vulnerability in Themeisle Redirection for Contact Form 7 wpcf7-redirect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Redirection for Contact Form 7: from n/a through <= 2.9.2.