CVE Database /
CVE-2024-4704
CVE · Medium
CVE-2024-4704 — Contact Form 7 [contact-form-7] < 5.9.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-4704
|
Contact Form 7 [contact-form-7] < 5.9.5 |
URL Redirection to Untrusted Site ('Open Redirect') |
Medium
6.1
|
< 5.9.5
|
5.9.5 |
2024-06-05 |
—
|
CVE-2024-4704
Contact Form 7 versions through 5.9.4 allow unauthenticated attackers to execute open redirect attacks by exploiting inadequate validation of the redirect URL parameter in contact forms. An attacker could manipulate a user into clicking a malicious link that redirects them to an external site after form submission. The vulnerability was patched in version 5.9.5 and requires no special authentication to exploit.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings