Description
Unauthenticated Cross Site Scripting (XSS) in Redirection for Contact Form 7 <= 3.2.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themeisle | Redirection for Contact Form 7 | ≤ 3.2.8 | — |
High · 7.1
CVE-2026-23970
EUVD-2026-36909GHSA-rvgx-ff5x-9ggp
WordPress Redirection for Contact Form 7 plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack