CVE-2021-24278

HIGHNuclei

Redirection for Contact Form 7 < 2.3.4 - Unauthenticated Arbitrary Nonce Generation

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24278 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX action to retrieve a valid nonce for any WordPress action/function.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 29, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

Redirection for Contact Form 7

Browse Query Solutions / Redirection for Contact Form 7
CVE List2.3.4 to < 2.3.4affected

redirection_for_contact_form_7

Browse querysol / redirection_for_contact_form_7
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryHIGHWordPress Contact Form 7 <2.3.4 - Arbitrary Nonce GenerationCVSS 7.5

WordPress Contact Form 7 before version 2.3.4 allows unauthenticated users to use the wpcf7r_get_nonce AJAX action to retrieve a valid nonce for any WordPress action/function.

Impact

Attackers can exploit this vulnerability to perform actions on behalf of authenticated users, leading to potential data breaches or unauthorized access.

Remediation

Update WordPress Contact Form 7 plugin to version 2.3.4 or later to fix the Arbitrary Nonce Generation vulnerability.

WeaknessesCWE-863
Authors2rs3c
Template tagscve2021cvewordpresswp-pluginwpscanquerysolvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:querysol:redirection_for_contact_form_7:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/99f30604-d62b-4e30-afcd-b482f8d66413 https://www.wordfence.com/blog/2021/04/severe-vulnerabilities-patched-in-redirection-for-contact-form-7-plugin/ https://nvd.nist.gov/vuln/detail/CVE-2021-24278 https://github.com/ARPSyndicate/cvemon https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

3