ThemeIsle Redirection for Contact Form 7

• CVE-2026-23970 High 7.1 WordPress Redirection for Contact Form 7 plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-14800 High 8.1 Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload 0.4%
• CVE-2025-9562 Medium 6.4 Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode 0.3%
• CVE-2025-8141 High 8.8 Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion 0.6%
• CVE-2025-8289 High 7.5 Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization 0.4%
• CVE-2025-8145 High 8.8 Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection 0.5%
• CVE-2023-39920 High 7.5 WordPress Redirection for Contact Form 7 plugin <= 2.9.2 - Broken Access Control vulnerability 0.8%