A potential vulnerability related to Open Redirection was found for the Contact Form 7 plugin.

What Steps Did ClearPG Take?

• We were notified about the issue and checked for any sites that might be affected.
• For our managed hosting customers, we automatically updated the plugin to the latest version after verifying the vulnerability was fixed.

References:

• https://patchstack.com/database/vulnerability/contact-form-7/wordpress-contact-form-7-plugin-5-9-5-unauthenticated-open-redirect-vulnerability?_a_id=350
• https://wpscan.com/vulnerability/8bdcdb5a-9026-4157-8592-345df8fb1a17/