Lucene search
Mirphak (Patchstack Alliance)PATCHSTACK:96B58CF430679150557DCEA4CC2DB213HistorySep 29, 2022 - 12:00 a.m.
WordPress Redirection for Contact Form 7 plugin <= 2.4.0 - Unauthenticated Options Change and Content Injection vulnerability
2022-09-2900:00:00
mirphak (Patchstack Alliance)
patchstack.com
12
wordpress
redirection
contact form 7
plugin
unauthenticated
options change
content injection
patchstack alliance
exploitation
accessibe
script
update
version 2.6.0
0.001 Low
EPSS
Percentile
26.7%
Unauthenticated Options Change vulnerability discovered by mirphak (Patchstack Alliance) in WordPress Redirection for Contact Form 7 plugin (versions <= 2.4.0). Successful exploitation requires an additional extension (plugin) AccessiBe. An attacker can inject a script into the footer.
Solution
Update the WordPress Redirection for Contact Form 7 plugin to the latest available version (at least 2.6.0).
| CPE | Name | Operator | Version |
|---|---|---|---|
| redirection for contact form 7 | le | 2.4.0 |
Related
cve
cve
CVE-2021-36913
2022-10-11 18:15:09
prion
prion
Design/Logic Flaw
2022-10-11 18:15:00
nvd
nvd
CVE-2021-36913
2022-10-11 18:15:09
cvelist
cvelist