CVE-2026-120659: falha de média gravidade em themeisle Redirection for Contact Form 7
Redirection for Contact Form 7 <= 3.2.14 - Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File Copy via 'wpcf7-redirect' Parameter
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.5%
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to write arbitrary post meta values to newly created lead posts and copy arbitrary server-side files with allowed MIME-type extensions into the plugin's uploads directory. Exploitation requires a published Contact Form 7 form configured with the Save Entry (Save Lead) action enabled on the target site.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
themeisle · Redirection for Contact Form 7CVEs relacionadas — themeisle Redirection for Contact Form 7
No mesmo produto, das mais perigosas para as menos.
CVE-2025-8141HIGHRedirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File DeletionEPSS 0.6%CVE-2025-8145HIGHRedirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object InjectionEPSS 0.5%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2025-14800HIGHRedirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_uploadEPSS 0.4%CVE-2025-8289HIGHRedirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR DeserializationEPSS 0.4%CVE-2025-9562MEDIUMRedirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date ShortcodeEPSS 0.3%
Referências
https://plugins.trac.wordpress.org/browser/wpcf7-redirect/tags/3.2.14/classes/actions/class-wpcf7r-action-save-lead.php#L200https://plugins.trac.wordpress.org/browser/wpcf7-redirect/tags/3.2.14/classes/class-wpcf7r-leads-manager.php#L541https://plugins.trac.wordpress.org/browser/wpcf7-redirect/tags/3.2.14/classes/class-wpcf7r-post-types.php#L264https://plugins.trac.wordpress.org/browser/wpcf7-redirect/tags/3.2.14/classes/class-wpcf7r-post-types.php#L28https://plugins.trac.wordpress.org/browser/wpcf7-redirect/tags/3.2.14/classes/class-wpcf7r-post-types.php#L289https://plugins.trac.wordpress.org/browser/wpcf7-redirect/tags/3.2.14/classes/class-wpcf7r-save-files.php#L202https://plugins.trac.wordpress.org/browser/wpcf7-redirect/tags/3.2.15https://www.wordfence.com/threat-intel/vulnerabilities/id/a07e05b8-590e-41fa-acf7-bcaac4ee8615?source=cve