CVE-2026-80439

The Redirection for Contact Form 7 WordPress plugin (versions 2.2.7 through 3.2.10 ) allows unauthenticated users to execute arbitrary shortcodes registered on the site. The root cause is that shortcodes contained in submitted form values are not sanitized before being substituted into an action'...