What is GHSA-55f3-fr67-q9hv?

GHSA-55f3-fr67-q9hv is a security advisory published by GitHub Security Advisories with Medium severity. The Redirection for Contact Form 7 WordPress plugin before 3.2.16 does not verify ownership of...

Which CVE IDs does GHSA-55f3-fr67-q9hv cover?

GHSA-55f3-fr67-q9hv covers the following CVE IDs: CVE-2026-121873. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-55f3-fr67-q9hv?

GHSA-55f3-fr67-q9hv has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-55f3-fr67-q9hvMediumCVSS 5.3

The Redirection for Contact Form 7 WordPress plugin before 3.2.16 does not verify ownership of...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-121873 →

📋 Description

The Redirection for Contact Form 7 WordPress plugin before 3.2.16 does not verify ownership of the email address supplied through its data request form action and by default records the resulting request as already confirmed, allowing unauthenticated visitors to create verified WordPress personal data erasure or export requests for addresses they do not control.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-121873
https://wpscan.com/vulnerability/543fa273-943b-40f6-bcdf-84ca800fa46b
https://github.com/advisories/GHSA-55f3-fr67-q9hv