CVE Database /
CVE-2021-24278
CVE · High
CVE-2021-24278 — Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-24278
|
Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4 |
Incorrect Authorization |
High
7.5
|
< 2.3.4
|
2.3.4 |
2021-04-20 |
—
|
CVE-2021-24278
The Redirection for Contact Form 7 plugin before version 2.3.4 contained a vulnerability where the wpcf7r_get_nonce AJAX action lacked proper access controls, allowing unauthenticated visitors to obtain valid nonces intended for any WordPress action or function. This flaw could enable attackers to bypass nonce verification and perform unauthorized actions on the affected WordPress installation.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings