Vulnerabilities > Querysol > Redirection FOR Contact Form 7 > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-05-14 CVE-2021-24279 Unspecified vulnerability in Querysol Redirection for Contact Form 7
In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the import_from_debug AJAX action to install any plugin from the WordPress repository.
network
low complexity
querysol
6.5
6.5
2021-05-14 CVE-2021-24281 Unspecified vulnerability in Querysol Redirection for Contact Form 7
In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the delete_action_post AJAX action to delete any post on a target site.
network
low complexity
querysol
4.3
4.3
2021-05-14 CVE-2021-24282 Unspecified vulnerability in Querysol Redirection for Contact Form 7
In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the various AJAX actions in the plugin to do a variety of things.
network
low complexity
querysol
6.3
6.3