Redirection For Contact Form 7

WordPress plugin · redirection-for-contact-form-7 · WordPress.org ↗

Critical

High

Known total

Unfixed

Running Redirection For Contact Form 7 on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.5	Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored XSS via Lead Debug Metabox CVE.org	>=2.2.7, <3.2.12	v3.2.12	CVE-2026-111574	Oct 21, 2026
MEDIUM CVSS 4.8	Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution via Action Setting Mail-Tags CVE.org	>=2.2.7, <3.2.11	v3.2.11	CVE-2026-80439	Sep 6, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.