CVE-2026-120659

The Redirection for Contact Form 7 plugin for WordPress is vulnerable to an authorization bypass in versions up to and including 3.2.14 . The root cause is the plugin's failure to properly verify user permissions for specific actions. This flaw allows unauthenticated attackers to write arbitrary ...