Redirection for Contact Form 7 < 2.3.4 - Authenticated PHP Object Injection
CVE-2021-24280
8.8HIGH
What is CVE-2021-24280?
In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the import_from_debug AJAX action to inject PHP objects.
Affected Version(s)
Redirection for Contact Form 7 2.3.4