High · 7.6 CVE-2023-23990 EUVD-2023-28054GHSA-6w8m-grv3-w8wv

WordPress Redirection for Contact Form 7 plugin <= 2.7.0 - Privilege Escalation vulnerability

Published May 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Qube One Product: Redirection for Contact Form 7

Description

Improper Privilege Management vulnerability in Qube One Ltd. Redirection for Contact Form 7 wpcf7-redirect allows Privilege Escalation.This issue affects Redirection for Contact Form 7: from n/a through 2.7.0.

Affected products

Vendor	Product	Affected	Fixed
Qube One	Redirection for Contact Form 7	≤ 2.7.0	—

References

https://patchstack.com/database/vulnerability/wpcf7-redirect/wordpress-redirection-for-contact-form-7-plugin-2-7-0-privilege-escalation-vulnerability?_s_id=cve vdb-entry