CVE Tools
Track your stack

Redirection For Contact Form 7

16 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Redirection For Contact Form 7, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Redirection For Contact Form 7 CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Redirection For Contact Form 7 CVEs per month
MonthCVEs
2024-110
2024-121
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-083
2025-090
2025-101
2025-110
2025-121
2026-010
2026-020
2026-030
2026-040
2026-050
2026-061
2026-070
2026-080
2026-090
2026-100

Severity

How the 16 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High1063%
  • Medium638%

Latest CVEs

The 15 most recently published vulnerabilities affecting Redirection For Contact Form 7.

  1. CVE-2026-23970WordPress Redirection for Contact Form 7 plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability7.1
  2. CVE-2025-14800Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload8.1
  3. CVE-2025-9562Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode6.4
  4. CVE-2025-8141Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion8.8
  5. CVE-2025-8289Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization7.5
  6. CVE-2025-8145Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection8.8
  7. CVE-2023-39920WordPress Redirection for Contact Form 7 plugin <= 2.9.2 - Broken Access Control vulnerability7.5
  8. CVE-2022-4974Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3
  9. CVE-2023-23990WordPress Redirection for Contact Form 7 plugin <= 2.7.0 - Privilege Escalation vulnerability7.6
  10. CVE-2021-36913Redirection for Contact Form 7 <= 2.4.0 - Unauthenticated Options Change and Content Injection vulnerability7.5
  11. CVE-2022-0250Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site Scripting6.1
  12. CVE-2021-24282Redirection for Contact Form 7 < 2.3.4 - Unprotected AJAX Actions6.3
  13. CVE-2021-24279Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Plugin Installation6.5
  14. CVE-2021-24281Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Post Deletion4.3
  15. CVE-2021-24278Redirection for Contact Form 7 < 2.3.4 - Unauthenticated Arbitrary Nonce Generation7.5

Product grouping is registry-driven, with AI assist and human review. How it works