CVE-2021-24282

CVE-2021-24282 describes an authenticated arbitrary action vulnerability in the Redirection for Contact Form 7 WordPress plugin prior to version 2.3.4. An authenticated user, even a subscriber, could exploit various AJAX actions to manipulate plugin settings, such as resetting configurations or adding actions to forms. Rated Medium severity with a CVSS score of 6.3, this vulnerability has a low attack complexity and could lead to limited impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.