CVE-2026-23970: Themeisle Redirection For Contact Form 7

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Unauthenticated Cross Site Scripting (XSS) in Redirection for Contact Form 7 <= 3.2.8 versions.

Affected products

• Themeisle Redirection For Contact Form 7: up to and including 3.2.8

Published 2026-06-15. Last modified 2026-06-17.