mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-26 21:52:25 +02:00
781 B
781 B
CVE-2021-24279
Description
In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the import_from_debug AJAX action to install any plugin from the WordPress repository.