CVE-2021-24279: Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Plugin Installation
In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the importfromdebug AJAX action to install any plugin from the WordPress repository.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-24279?
CVE-2021-24279 is considered a high severity vulnerability that allows low level users to install plugins.
How do I fix CVE-2021-24279?
To fix CVE-2021-24279, update the Redirection for Contact Form 7 plugin to version 2.3.4 or later.
Who is affected by CVE-2021-24279?
CVE-2021-24279 affects users of the Redirection for Contact Form 7 WordPress plugin prior to version 2.3.4.
What are the implications of CVE-2021-24279?
The implications of CVE-2021-24279 include unauthorized plugin installation by low level users, potentially compromising site security.
Is there a known exploit for CVE-2021-24279?
While specific exploits may not be publicly available, the vulnerability enables low level users to execute unauthorized actions on affected sites.