CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Themeisle Redirection for Contact Form 7 wpcf7-redirect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Redirection for Contact Form 7: from n/a through <= 2.9.2.
Explanation of Vulnerability in Simple Terms
The Redirection for Contact Form 7 plugin for WordPress contains an authorization flaw that allows unauthenticated attackers to read sensitive data. An attacker can access information without needing to log in or interact with a site administrator. This affects all versions up to 2.9.2. Site owners should update immediately to a patched version.
What an attacker can do
Read sensitive data from the plugin without logging in.
Potential impact on your site
Attackers can access confidential information stored or processed by the plugin without any credentials.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
