CyberSec.Space Logo
Back to CVE Browser

CVE-2021-36913

HIGH
7.5
CVSS Severity Score
EPSS Score0.1250%
EPSS Percentile36.78th
PublishedOct 11, 2022
Last ModifiedNov 21, 2024

Vulnerability Description

Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to change options and inject scripts into the footer HTML. Requires an additional extension (plugin) AccessiBe.

Affected Platforms (CPE)

📦
Redirection For Contact Form7

Redirection For Contact Form 7

< 2.6.0

References & Advisories

🔗 https://patchstack.com/database/vulnerability/wpcf7-redirect/wordpress-redirection-for-contact-form-7-plugin-2-4-0-unauthenticated-options-change-vulnerability?_s_id=cve
🔗 https://wordpress.org/plugins/wpcf7-redirect/#developers
🔗 https://patchstack.com/database/vulnerability/wpcf7-redirect/wordpress-redirection-for-contact-form-7-plugin-2-4-0-unauthenticated-options-change-vulnerability?_s_id=cve
🔗 https://wordpress.org/plugins/wpcf7-redirect/#developers

Related Vulnerabilities

CVE-2021-242808.8

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the i...

CVE-2021-242787.5

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX actio...

CVE-2026-239707.1

Unauthenticated Cross Site Scripting (XSS) in Redirection for Contact Form 7 <= 3.2.8 versions.

CVE-2021-242796.5

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the import_fr...