Employing wpcf7_form_action_url filter to lead form submitters to a different site is not the intended use, and can constitute a security risk.
This vulnerability affects the following application versions:
- Contact Form 7 5.9
- Contact Form 7 5.9.2
- Contact Form 7 5.9.3
- Contact Form 7 5.9.4