Privilege Escalation Vulnerability in Redirection for Contact Form 7

CVE-2023-23990

What is CVE-2023-23990?

The vulnerability in the Redirection for Contact Form 7 plugin from Qube One Ltd. arises from improper privilege management. This flaw allows unauthorized users to escalate their privileges, potentially leading to unauthorized actions within the WordPress environment. Affected versions include all preceding version 2.7.0, posing a risk for web administrators and site integrity. It is crucial to apply the necessary patches to safeguard against possible exploitation.

References