Qube One ltd

Hi,

Can you update the plugin again and add a link to your form so we can check the issue?

Hi, please send details to [email protected] so we can further investigate the issue

Please download and install v3.1.3 from here:

https://www.ads-software.com/plugins/wpcf7-redirect/advanced/

And let me know if that solved your issue

Please try to re-update to 3.1.1

• This reply was modified 1 year, 2 months ago by Qube One ltd.
• This reply was modified 1 year, 2 months ago by Qube One ltd.

If this plugin had any malicious intensions, it would have been removed from the repository,
And it would have come up by wordfence previous reports – it didn’t.

We don’t know why the plugin author didn’t contact us to inform of any problem and decided to write what he wrote, as an open-source community here in WordPress we would have expected that he will contact us and let us know what the problem was in order for us to be able to fix it.

There is already a request on his support forum: https://www.ads-software.com/support/topic/information-on-security/
And we have tried contacting him via email/wordpress slack channel and his website contact form.

Please read my previous comments regarding wordfence reports and our quick response to that.

We will keep trying to contact him and figure out why he wrote that.

I have reached out to the plugin author and asked him what he is referring to, so far with no response.

He released a patch to solve the issue that was mentioned as he noted “To avoid the security risk, upgrade Contact Form 7 to 5.8.4 or later as soon as possible”

As you can notice on Wordfence vulnerability report, all prior issues before version 2.9.2 are resolved:

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wpcf7-redirect

I will continue trying to contact the plugin author and understand the issue he mentioned and will release a fix if required.

There was of course no deliberate disable of security mechanism made.

Hi,

As you can see in wordfence log all vulnerabilities prior to version 2.9.2 were fixed:
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wpcf7-redirect

We take security very seriously and have fixed in the past any issue concerning security in a quick manner.

As mentioned by wordfence security researcher in the past Chloe Chamberland on an issue found on 2021:

“Special thank you to Lior Regev at Redirection for Contact Form 7 for an exceptionally fast response in patching the disclosed vulnerabilities.“

We will keep doing so!

• This reply was modified 1 year, 3 months ago by Qube One ltd.

Can you add a link to the vulnerability report?

This is not a known issue.. As detailed on Wordfence all vaunarabilities prior to 2.9.2 were addressed and fixed

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wpcf7-redirect

We don’t see any issues with that, the redirection should be working as expected on contact form 7 5.8.3

This is not “country code” plugin support forum so we cannot help you

Try here: https://www.ads-software.com/plugins/country-phone-field-contact-form-7/

This is not contact-form 7 support forum.
You can find it here: https://www.ads-software.com/support/plugin/contact-form-7/

This behavior is not happening on my end (tried with your settings),
Please send an email to [email protected] so we can further investigate this issue

Are you using a custom url? or selected a specific page?
Can you add a screenshot of your action settings?

Did you activate the plugin?
Can you attache a screenshot of a single form and also add a list of the installed plugins and their versions?

Thanks

The latest version of this plugin is 2.8.0 – you are using an older version.

Please update the plugin to its latest version