Skip to contentThemefic Ultimate Addons For Contact Form 7 vulnerabilities
- themefic ultra addons for contact form 7, ultimate addons for contact form 7 +1 moreUltra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS ShortcodeCVE-2025-67566.4 Medium
- themefic ultra addons for contact form 7, ultimate addons for contact form 7 +1 moreUltra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database moduleCVE-2025-62127.2 High
- themefic ultimate addons for contact form 7, ultra addons for contact form 7 +1 moreUltimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'CVE-2025-6220Public exploit7.2 High
- themefic ultimate addons for contact form 7WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL InjectionCVE-2023-304958.5 High
- themefic ultimate addons for contact form 7WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-497667.1 High
- themefic ultimate addons for contact form 7WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-304937.1 High
- themefic ultimate addons for contact form 7Ultimate Addons for Contact Form 7 < 3.1.29 - Admin+ Stored XSSCVE-2023-28024.8 Medium
- themefic ultimate addons for contact form 7Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSSCVE-2023-28036.1 Medium
- themefic ultimate addons for contact form 7WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL InjectionCVE-2022-475868.2 High
- psdtowpservice ultimate addons for contact form 7The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via...CVE-2023-16158.8 High