Redirection for Contact Form 7

WordPress plugin · wpcf7-redirect · WordPress.org ↗

Latest v3.2.12 Last release Sep 8, 2026 Tested up to WP 7.1.1 200,000+ active installs

Critical

High

Known total

Unfixed

Running Redirection for Contact Form 7 on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.1	Redirection for Contact Form 7 [wpcf7-redirect] < 3.2.9 WPVulnerability	< 3.2.9	v3.2.9	CVE-2026-23970	May 13, 2026
HIGH CVSS 8.1	Redirection for Contact Form 7 [wpcf7-redirect] < 3.2.8 WPVulnerability	< 3.2.8	v3.2.8	CVE-2025-14800	Dec 20, 2025
HIGH CVSS 7.5	Redirection for Contact Form 7 [wpcf7-redirect] < 3.2.5 WPVulnerability	< 3.2.5	v3.2.5	CVE-2025-8289	Aug 19, 2025
HIGH CVSS 8.8	Redirection for Contact Form 7 [wpcf7-redirect] < 3.2.5 WPVulnerability	< 3.2.5	v3.2.5	CVE-2025-8145	Aug 19, 2025
HIGH CVSS 8.8	Redirection for Contact Form 7 [wpcf7-redirect] < 3.2.5 WPVulnerability	< 3.2.5	v3.2.5	CVE-2025-8141	Aug 19, 2025
HIGH CVSS 7.5	Redirection for Contact Form 7 [wpcf7-redirect] < 3.0.0 WPVulnerability · PoC available	< 3.0.0	v3.0.0	CVE-2023-39920	Oct 3, 2023
HIGH CVSS 7.1	Redirection for Contact Form 7 [wpcf7-redirect] < 2.9.2 WPVulnerability	< 2.9.2	v2.9.2	CVE-2023-33999	Jul 18, 2023
HIGH CVSS 7.6	Redirection for Contact Form 7 [wpcf7-redirect] < 2.8.0 WPVulnerability	< 2.8.0	v2.8.0	CVE-2023-23990	Feb 6, 2023
HIGH CVSS 7.5	Redirection for Contact Form 7 [wpcf7-redirect] < 2.7.0 WPVulnerability	< 2.7.0	v2.7.0	CVE-2021-36913	Sep 29, 2022
HIGH CVSS 8.8	Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4 WPVulnerability	< 2.3.4	v2.3.4	CVE-2021-24280	Apr 20, 2021
HIGH CVSS 7.5	Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4 WPVulnerability	< 2.3.4	v2.3.4	CVE-2021-24278	Apr 20, 2021
MEDIUM CVSS 4.8	Redirection for Contact Form 7 [wpcf7-redirect] < 3.2.11 WPVulnerability	< 3.2.11	v3.2.11	CVE-2026-80439	May 13, 2026
MEDIUM CVSS 6.4	Redirection for Contact Form 7 [wpcf7-redirect] < 3.2.7 WPVulnerability	< 3.2.7	v3.2.7	CVE-2025-9562	Oct 17, 2025
MEDIUM CVSS 6.1	Redirection for Contact Form 7 [wpcf7-redirect] < 2.5.0 WPVulnerability	< 2.5.0	v2.5.0	CVE-2022-0250	Mar 7, 2022
MEDIUM CVSS 6.3	Redirection for Contact Form 7 [wpcf7-redirect] < 2.5.0 WPVulnerability	< 2.5.0	v2.5.0	CVE-2022-4974	Mar 4, 2022
MEDIUM CVSS 6.3	Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4 WPVulnerability	< 2.3.4	v2.3.4	CVE-2021-24282	Apr 20, 2021
MEDIUM CVSS 4.3	Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4 WPVulnerability	< 2.3.4	v2.3.4	CVE-2021-24281	Apr 20, 2021
MEDIUM CVSS 6.5	Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4 WPVulnerability	< 2.3.4	v2.3.4	CVE-2021-24279	Apr 20, 2021
UNKNOWN	Redirection for Contact Form 7 [wpcf7-redirect] < 2.5.0 WPVulnerability	< 2.5.0	v2.5.0	—	Feb 28, 2022
UNKNOWN	Redirection for Contact Form 7 [wpcf7-redirect] < 2.5.0 WPVulnerability	< 2.5.0	v2.5.0	—	Feb 28, 2022
UNKNOWN	Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4 WPVulnerability	< 2.3.4	v2.3.4	—	Apr 20, 2021
UNKNOWN	Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4 WPVulnerability	< 2.3.4	v2.3.4	—	Apr 20, 2021
UNKNOWN	Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4 WPVulnerability	< 2.3.4	v2.3.4	—	Apr 20, 2021
UNKNOWN	Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4 WPVulnerability	< 2.3.4	v2.3.4	—	Apr 20, 2021
UNKNOWN	Redirection for Contact Form 7 [wpcf7-redirect] < 2.3.4 WPVulnerability	< 2.3.4	v2.3.4	—	Apr 20, 2021
UNKNOWN	Redirection for Contact Form 7 [wpcf7-redirect] < 2.5.0 WPVulnerability	< 2.5.0	v2.5.0	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.