CVE-2021-24278 Redirection for Contact Form 7 < 2.3.4 - Unauthenticated Arbitrary Nonce Generation
Unauthenticated attackers can generate valid nonces for any WordPress action, bypassing security checks in the Redirection for Contact Form 7 plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-24278?
CVE-2021-24278 is a high-severity authentication bypass vulnerability in Query Solutions Redirection for Contact Form 7, published on 14 May 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX action to retrieve a valid nonce for any WordPress action/function.
Weakness: CWE-863
Which versions are affected by CVE-2021-24278?
It affects 1 product.
Products include Querysol Redirection for Contact Form 7.
How do I fix CVE-2021-24278?
No fix has been published for CVE-2021-24278 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-24278 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-24278 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Query Solutions Redirection for Contact Form 7
- CVE-2021-24280 Redirection for Contact Form 7 < 2.3.4 - Authenticated PHP Object Injection
- CVE-2021-24279 Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Plugin Installation
- CVE-2021-24282 Redirection for Contact Form 7 < 2.3.4 - Unprotected AJAX Actions
- CVE-2021-24281 Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Post Deletion
Sources
Also known as GHSA-8xwc-4w4g-wpqp.