CVE-2021-24279

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the importfromdebug AJAX action to install any plugin from the WordPress repository...

WordPress Redirection for Contact Form 7 Plugin < 2.3.4 Multiple Vulnerabilities

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2021-24279

CVE-2021-24279 affects the WordPress plugin Redirection for Contact Form 7 prior to version 2.3.4. The vulnerability allows low-privileged users (e.g., subscribers) to trigger the import_from_debug AJAX action to install arbitrary plugins from the WordPress repository. The underlying issue is imp...

CVE-2021-24279 Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Plugin Installation

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the importfromdebug AJAX action to install any plugin from the WordPress repository...