Redirection For Contact Form 7
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:redirection_for_contact_form_7:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Redirection For Contact Form 7 (5adbf921-f0b5-5584-8128-abb8752a8961) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-80439 |
vulnerable | 2026-09-16 04:32:40.161175 |
Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution via Action Setting Mail-Tags
MEDIUM (4.8)
The Redirection for Contact Form 7 WordPress plugin from 2.2.7 before 3.2.11 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into an action's settings and then processes those settings for shortcodes, allowing unauthenticated users to run any shortcode registered on the site and read its output.
Published: 2026-09-06T09:36:34.507Z
Updated: 2026-09-06T10:43:25.729Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0250 |
vulnerable | 2026-06-08 05:39:09.608141 |
Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site Scripting
The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting
Published: 2022-07-04T13:05:38.000Z
Updated: 2024-08-02T23:18:42.879Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.