High 8.1
2025-12-21< 3.2.8
CVE-2025-14800
Redirection for Contact Form 7
Minimum safe version
3.2.8
Update to 3.2.8 or later to address 25 fixable vulnerabilities
Latest available3.2.9 ✓
Medium 6.4
2025-10-18< 3.2.7
Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode
High 7.5
2025-08-20< 3.2.5
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization
High 8.8
2025-08-20< 3.2.5
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection
High 8.8
2025-08-20< 3.2.5
WordPress Redirection for Contact Form 7 Plugin <= 3.2.4 is vulnerable to Arbitrary File Deletion
Medium 6.3
2024-10-16< 2.5.0
Freemius SDK <= 2.4.2 - Missing Authorization Checks
High 7.5
2024-12-13< 3.0.0
CVE-2023-39920
N/A
2023-07-18< 2.9.2
WordPress Redirection for Contact Form 7 Plugin < 2.9.2 is vulnerable to Cross Site Scripting (XSS)
High 7.6
2024-05-17< 2.8.0
CVE-2023-23990
N/A
2022-03-04< 2.5.0
Freemius SDK <= 2.4.2 - Missing Authorization Checks
High 7.5
2022-10-11< 2.7.0
CVE-2021-36913
N/A
< 2.5.0
Unauthorised AJAX Calls via Freemius
Medium 6.1
2022-07-04< 2.5.0
CVE-2022-0250
N/A
2021-04-20< 2.3.4
WordPress Redirection for Contact Form 7 plugin <= 2.3.3 - Unprotected AJAX Actions vulnerability
N/A
2021-04-20< 2.3.4
WordPress Redirection for Contact Form 7 plugin <= 2.3.3 - Authenticated Arbitrary Post Deletion vulnerability
N/A
2021-04-20< 2.3.4
WordPress Redirection for Contact Form 7 plugin <= 2.3.3 - Authenticated PHP Object Injection vulnerability
N/A
2021-04-20< 2.3.4
WordPress Redirection for Contact Form 7 plugin <= 2.3.3 - Authenticated Arbitrary Plugin Installation vulnerability
N/A
2021-04-20< 2.3.4
WordPress Redirection for Contact Form 7 plugin <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation vulnerability
N/A
2022-02-28< 2.5.0
WordPress Redirection for Contact Form 7 plugin < 2.5.0 - Sensitive Information Disclosure vulnerability
N/A
2022-02-28< 2.5.0
WordPress Redirection for Contact Form 7 plugin < 2.5.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
High 7.5
2021-05-14< 2.3.4
CVE-2021-24278
Medium 6.3
2021-05-14< 2.3.4
CVE-2021-24282
Medium 4.3
2021-05-14< 2.3.4
CVE-2021-24281
High 8.8
2021-05-14< 2.3.4
CVE-2021-24280
Medium 6.5
2021-05-14< 2.3.4
CVE-2021-24279