CVE-2021-24279

MEDIUM · CVSS 6.5 EPSS 0.83%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-05-14 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-24279

Severity

MEDIUM

CVSS

6.5

EPSS

0.83%

WordPress

Original NVD Description

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the import_from_debug AJAX action to install any plugin from the WordPress repository.