Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 17:21:29 +0000 CVE-2026-80439 — Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution via Action Setting Mail-T… https://vulnerability.circl.lu/vuln/cve-2026-80439 <p><strong>Affected:</strong> Unknown Redirection for Contact Form 7</p> <p>The Redirection for Contact Form 7 WordPress plugin from 2.2.7 before 3.2.11 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into an action&#39;s settings and then processes those settings for shortcodes, allowing unauthenticated users to run any shortcode registered on the site and read its output.</p> <p><strong>Affected:</strong> Unknown Redirection for Contact Form 7</p> <p>The Redirection for Contact Form 7 WordPress plugin from 2.2.7 before 3.2.11 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into an action&#39;s settings and then processes those settings for shortcodes, allowing unauthenticated users to run any shortcode registered on the site and read its output.</p> https://vulnerability.circl.lu/vuln/cve-2026-80439