6.1
Medium
CVE-2024-4704 The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and…
Description
The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and redirect to the URL of their choosing.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contact Form 7 5.9 | earliest → < 5.9.5 | 5.9.5 |
| contact_form_7 5.9 | earliest → < 5.9.5 | 5.9.5 |