Skip to contentThemefic Ultra Addons For Contact Form 7 vulnerabilities
- themefic ultra addons for contact form 7Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Arbitrary File Read via CF7 Field Value in mPDF WriteHTML SVG ParserCVE-2026-1003867.5 High
- themefic ultra addons for contact form 7Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form FieldCVE-2026-1024359.8 Critical
- themefic ultra addons for contact form 7Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Stored Cross-Site Scripting via File UploadCVE-2026-1039997.2 High
- themefic ultra addons for contact form 7Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form FieldCVE-2026-82901Public exploit9.8 Critical
- themefic ultra addons for contact form 7Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload via Signature FieldCVE-2026-847506.5 Medium
- themefic ultra addons for contact form 7Ultra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider AttributesCVE-2026-128016.4 Medium
- themefic ultra addons for contact form 7Ultra Addons for Contact Form 7 <= 3.5.33 - Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDFCVE-2025-143564.3 Medium
- themefic ultra addons for contact form 7, ultimate addons for contact form 7 +1 moreUltra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS ShortcodeCVE-2025-67566.4 Medium
- themefic ultra addons for contact form 7, ultimate addons for contact form 7 +1 moreUltra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database moduleCVE-2025-62127.2 High
- themefic ultimate addons for contact form 7, ultra addons for contact form 7 +1 moreUltimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'CVE-2025-6220Public exploit7.2 High