The Redirection for Contact Form 7 plugin for WordPress has a security issue in versions up to and including 2.4.0. This means that someone who is not logged in can change the plugin’s settings. This is a problem because it could let someone do something they should not be able to do.