2 matches found
CVE-2021-24278
In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7rgetnonce AJAX action to retrieve a valid nonce for any WordPress action/function...
7.5CVSS7AI score0.07359EPSS
SaveExploits2References4Affected Software1
CVE-2021-24278: Incorrect Authorization
In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7rgetnonce AJAX action to retrieve a valid nonce for any WordPress action/function...
7.5CVSS5.8AI score0.07359EPSS
SaveExploits2References2
20