ultra_addons_for_contact_form_7 vulnerabilities

CVEs whose affected-version data names the ultra_addons_for_contact_form_7 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-84750Medium· 6.5

6d ago

The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, and stores them at a predictable public path with the attacker-chosen extension …

The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, and stores them at a predictable public path with the attacker-chosen extension …

▾ SunlitEPSS 0.45%via NVD