← Back to CVE List

CVE-2021-24278

Published: 2021-05-14T12:15Z
Last Modified: 2024-11-21T05:52Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX action to retrieve a valid nonce for any WordPress action/function. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt