Skip to contentThemeisle Redirection For Contact Form 7 vulnerabilities
- themeisle redirection for contact form 7Redirection for Contact Form 7 2.6.0 - 3.2.15 - Unauthenticated Forged Personal Data Request CreationCVE-2026-1218735.3 Medium
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.14 - Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File Copy via 'wpcf7-redirect' ParameterCVE-2026-1206595.3 Medium
- themeisle redirection for contact form 7Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored XSS via Lead Debug MetaboxCVE-2026-1115747.5 High
- themeisle redirection for contact form 7Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution via Action Setting Mail-TagsCVE-2026-804394.8 Medium
- themeisle redirection for contact form 7WordPress Redirection for Contact Form 7 plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-239707.1 High
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_uploadCVE-2025-148008.1 High
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date ShortcodeCVE-2025-95626.4 Medium
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR DeserializationCVE-2025-82897.5 High
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File DeletionCVE-2025-81418.8 High
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object InjectionCVE-2025-81458.8 High
- themeisle redirection for contact form 7WordPress Redirection for Contact Form 7 plugin <= 2.9.2 - Broken Access Control vulnerabilityCVE-2023-399207.5 High
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- qube one ltd. redirection for contact form 7WordPress Redirection for Contact Form 7 plugin <= 2.7.0 - Privilege Escalation vulnerabilityCVE-2023-239907.6 High
- redirection-for-contact-form7 redirection for contact form 7Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site ScriptingCVE-2022-02506.1 Medium
- query solutions redirection for contact form 7Redirection for Contact Form 7 < 2.3.4 - Unprotected AJAX ActionsCVE-2021-242826.3 Medium
- query solutions redirection for contact form 7Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Post DeletionCVE-2021-242814.3 Medium
- query solutions redirection for contact form 7Redirection for Contact Form 7 < 2.3.4 - Authenticated PHP Object InjectionCVE-2021-242808.8 High
- query solutions redirection for contact form 7Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Plugin InstallationCVE-2021-242796.5 Medium
- query solutions redirection for contact form 7Redirection for Contact Form 7 < 2.3.4 - Unauthenticated Arbitrary Nonce GenerationCVE-2021-242787.5 High