Redirection for Contact Form 7

Explore Redirection for Contact Form 7 vulnerabilities across all versions. Currently tracking 17 known vulnerabilities, including severity, impact, and patch status.

01234567891012.08.2017Today20.04.20216.5Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Plugin Installation CVSS 6.5 · 20.04.20217.5Redirection for Contact Form 7 <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation CVSS 7.5 · 20.04.20218.8Redirection for Contact Form 7 <= 2.3.3 - Authenticated PHP Object Injection CVSS 8.8 · 20.04.20216.3Redirection for Contact Form 7 <= 2.3.3 - Unprotected AJAX Actions CVSS 6.3 · 20.04.20214.3Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Post Deletion CVSS 4.3 · 20.04.202104.03.20226.3Freemius SDK <= 2.4.2 - Missing Authorization Checks CVSS 6.3 · 04.03.202207.03.20226.1Redirection for Contact Form 7 <= 2.4.0 - Reflected Cross-Site Scripting CVSS 6.1 · 07.03.202229.09.20225.3Redirection for Contact Form 7 <= 2.4.0 - Missing Authorization CVSS 5.3 · 29.09.202206.02.20237.2Redirection for Contact Form 7 <= 2.7.0 - Authenticated(Editor+) Privilege Escalation CVSS 7.2 · 06.02.202318.07.20236.1Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get CVSS 6.1 · 18.07.202303.10.20235.3Redirection for Contact Form 7 <= 2.9.2 - Missing Authorization CVSS 5.3 · 03.10.202319.08.20258.8Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection CVSS 8.8 · 19.08.20257.5Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization CVSS 7.5 · 19.08.20258.8Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion CVSS 8.8 · 19.08.202517.10.20256.4Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode CVSS 6.4 · 17.10.202520.12.20258.1Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload CVSS 8.1 · 20.12.202513.05.20267.2Redirection for Contact Form 7 <= 3.2.8 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 13.05.2026

Strategic Overview

Avg CVSSMedium
6.9/ 10
Patch Coverage100%
Open

0

Fixed

17

Get automatic notifications for all Redirection for Contact Form 7 vulnerabilities before they are exploited.

Vulnerability Records

17 records
2026-05-13 00:00CVE-2026-23970
7.2
High
JongHwan Shin (zzzsleep)Yes
2025-12-20 18:43CVE-2025-14800
8.1
High
LionTreeYes
2025-10-17 17:48CVE-2025-9562
6.4
Medium
Muhammad Yudha - DJYes
2025-08-19 12:31CVE-2025-8141
8.8
High
Phat RiOYes
2025-08-19 12:30CVE-2025-8289
7.5
High
Phat RiOYes
2025-08-19 12:29CVE-2025-8145
8.8
High
Phat RiOYes
2023-10-03 00:00CVE-2023-39920
5.3
Medium
Nguyen Anh TienYes
2023-07-18 00:00CVE-2023-33999
6.1
Medium
Rafie MuhammadYes
2023-02-06 00:00CVE-2023-23990
7.2
High
Rafie MuhammadYes
2022-09-29 00:00CVE-2021-36913
5.3
Medium
mirphakYes
Showing 1–10 of 17 reports
Redirection for Contact Form 7 banner
Latestv3.2.10

Redirection for Contact Form 7

Themeisle

Author

Themeisle

4.7(275)
94/100
Last Updated
2026-05-19 (2mo ago)
Active Installs
200,000+
Downloads
5,794,194
Requires WP
5.1+
Requires PHP
0+
Tested up to
WP 7.0.2
Created
2017-08-12 (9y ago)
Requires Plugins
contact-form-7

Redirection for Contact Form 7 enhances your forms with essential post-submission actions all in one plugin. Store form entries in your database, redirect users to any page or URL, send email notifications, block spam with honeypot protection, and help with GDPR compliance through data export/erase requests. Want more power? Our PRO version includes JavaScript execution after submission, webhook integration for third-party services, conditional logic based on user input, frontend post creation, PDF generation from form data, and seamless integrations with popular services like Mailchimp, PayPal, Stripe, HubSpot, Salesforce, and Twilio. 🔗 HELPFUL LINKS: Need any help with setup? CHECK DOCUMENTATION Interested in Redirection For CF7 Pro? LEARN MORE USAGE Simply go to your form settings, select the “Action” tab, and add additional Submission Actions based on your requirements. NOTE: This plugin requires CF7 version 4.8 or later. 🤝 HOW REDIRECTION FOR CF7 CAN HELP YOU: Redirect to Any URL: Easily redirect users to any specific webpage after form submission, enhancing user navigation and experience. Open Page in a New Tab: Configure forms to open the target URL in a new tab, keeping your site accessible to users post-submission. Pass Fields from the Form as URL Query Parameters: Seamlessly append submitted form data to the URL as query parameters, enabling personalized follow-up pages. Add Honeypot to Minimize Spam: Integrate a honeypot technique in your forms to prevent spam without affecting user experience. Save Form Submissions to Your Database: Automatically store all form submissions in your database, ensuring no data loss and facilitating easy back-referencing. GDPR Compliance – Create Erase Personal Data Request: Allow users to initiate requests for erasing their personal data, ensuring compliance with GDPR mandates. GDPR Compliance – Create Export Personal Data Request: Enable users to request exports of their personal data, supporting transparency and adherence to GDPR guidelines. 🤩 GET MORE FEATURES WITH REDIRECTION FOR CF7 PRO Add Conditional Logic: Enhance your submission actions with the Conditional Logic of Actions Extension. Set If/Or rules based on user inputs to manage powerful conditional rules effectively. Run JavaScript After Form Submission: Execute custom JavaScript code after a form is submitted, ideal for tracking conversions and integrating with analytics tools. Create and Send PDF: Add the option to generate and send PDF using the submitted form fields. Frontend Publishing: Add the ability to allow your users to publish posts from your website front-end. Webhook Integration: Supercharge your forms with advanced Webhook support—seamlessly connect to third-party apps using POST, GET, DELETE, and PATCH methods, with full compatibility for PARAMS, JSON, and XML formats.Empower your forms with advanced Webhook integration, supporting POST, GET, DELETE, PATCH methods and PARAMS, JSON, and XML formats for comprehensive connectivity with third party apps. Add a Thank You Popup: Add the ability to thank your users with a noticeably designed thank-you popup. Integrate with Mailchimp: Add the ability to register submitted forms to any of your MailChimp lists. Integrate PayPal & Stripe: Collect payments from your users by redirecting them to PayPal or Stripe. Integrate with HubSpot CRM: Add the ability to send form submissions from Contact Form 7 to HubSpot CRM. Integrate with Salesforce CRM: Add the ability to send submission forms from Contact Form 7 to Salesforce CRM. SMS with Twilio Integration: Add the ability to send SMS messages to your users or notifications to yourself using Twilio. Unlock these premium features and more with Redirection for CF7 PRO! Still have questions? Ask your pre-sales questions here, and we will get back to you promptly. Or, purchase with confidence and try it for yourself—we offer a 30-day no-questions-asked 100% money-back guarantee. 🤔 WHAT YOU CAN DO WITH REDIRECTION FOR CF7: Redirection for Contact Form 7 opens up a world of opportunities! Explore how different audiences can leverage its features: 📦 E-commerce Sites: Automate order confirmations and updates through SMS with the Twilio integration, providing customers with real-time updates directly on their phones. 🫶 Non-Profit Organizations: Enhance donor engagement by redirecting donors to personalized thank you pages using Conditional Logic, and manage GDPR compliance with data export and erase requests. 🏠 Real Estate Agencies: Direct potential clients to a customized URL after form submission, showcasing specific property details or offers based on the input from inquiry forms. 🛠️ Tech Support Services: Link form submissions with Salesforce or HubSpot CRM to automatically create support tickets and manage follow-up actions efficiently. 📚 Education Providers: Implement the Frontend Publishing feature to allow students to submit assignments and projects directly through forms, making submission processes smoother and more organized. 📈 Marketing Teams: Capture lead information and automatically add it to a Mailchimp email list for subsequent marketing campaigns, ensuring seamless integration with your digital marketing strategies. 💵 Freelancers and Consultants: Offer a streamlined payment process by integrating with PayPal and Stripe, allowing clients to pay for services directly through the submission form. 📝 Bloggers and Influencers: Manage user-generated content by enabling frontend post submissions, allowing followers to contribute stories, photos, or feedback directly on the website. ✨ YOU SHOULD USE REDIRECTION WITH CF7 IF: You Want to Personalize User Journeys: Provide a tailored experience by redirecting users to pages that fit their needs. You Aim to Automate Processes: Simplify workflows by directing users to relevant resources or actions after form submission. You Seek to Increase Engagement: Capture user interest by guiding them to content or offers that resonate with them. You Need to Optimize Conversions: Redirect users to strategically designed pages to maximize conversion opportunities. You Plan to Manage Leads Efficiently: Ensure leads are channeled to the right destination for effective handling and follow-up. 👋 WE’RE HERE FOR YOU, AND WE TAKE ALL FEEDBACK SERIOUSLY 📚 Knowledge Base: We’ve created a complete documentation library and we’re still constantly updating with new tutorials. 🦸 Support forum: We’re here to help. Feel free to open a new thread on the Support Forum. 🎙️ SEE WHAT REAL USERS TALK ABOUT US Very nice and helpful plugin – “This is a very helpful plugin. It makes my task much easier and it is also very nice for website users to be redirected to the summary page of their entries.” Works like a charm 🙂 – “What else to say? When a customer submits a form, it fluently redirects him/her to specific url when I say “Thank you for submitting the form, we will contact you later…”. So thank you very much creators!” 5 star – “Working with Conversion tracking and I like the fact that you can pull the contact form fields in that you want to show on the Thank you page. Everything works fantatic.” Really useful! – “Just chiming in with a positive review. Works great, and has been for a while now. Thanks so much!!”

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C