Redirection for Contact Form 7 vulnerabilities | LiveThreat CVE Feed

Product

Redirection for Contact Form 7

by themeisle · last CVE Jun 15, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 6Medium 1Low 0

Severity

Exploitation

Watch

Add Redirection for Contact Form 7 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-8141	8.8	1%	Aug 20	Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion Affected: through 3.2.4
CVE-2025-8145	8.8	1%	Aug 20	Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection Affected: through 3.2.4
CVE-2025-14800	8.1	0%	Dec 21	Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload Affected: through 3.2.7
CVE-2025-8289	7.5	0%	Aug 20	Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization Affected: through 3.2.4
CVE-2023-39920	7.5	1%	Dec 13	WordPress Redirection for Contact Form 7 plugin <= 2.9.2 - Broken Access Control vulnerability Affected: through 2.9.2
CVE-2026-23970	7.1	0%	Jun 15	WordPress Redirection for Contact Form 7 plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability Affected: through 3.2.8
CVE-2025-9562	6.4	0%	Oct 18	Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode Affected: through 3.2.6