A vulnerability labeled as critical has been found in Themeisle Redirection for Contact Form 7 Plugin up to 3.2.7 on WordPress. This issue affects the function
move_file_to_upload. The manipulation results in unrestricted upload.
This vulnerability is cataloged as CVE-2025-14800. The attack may be launched remotely. There is no exploit available.