CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
What the vulnerability does
Improper Privilege Management vulnerability in Qube One Ltd. Redirection for Contact Form 7 wpcf7-redirect allows Privilege Escalation.This issue affects Redirection for Contact Form 7: from n/a through 2.7.0.
Explanation of Vulnerability in Simple Terms
Redirection for Contact Form 7 through version 2.7.0 contains a privilege management flaw that allows high-privileged users to perform unauthorized actions when a victim visits a malicious page. The vulnerability requires administrator-level access and user interaction to exploit, but can result in full compromise of site data and functionality when successful.
What an attacker can do
An admin user can trick another admin into visiting a malicious page to read, modify, or delete site data.
Potential impact on your site
An administrator's account could be abused to alter or delete site content, user data, or plugin settings without their knowledge.
Conditions required to exploit
Attacker must have administrator access; victim admin must click a malicious link or visit an attacker-controlled page.
Key dates
External resources
Related vulnerabilities
