Перейти к содержимому
Noroxi

Ultimate Addons for Contact Form 7

ultimate-addons-for-contact-form-7 · плагин

Известные уязвимости для Ultimate Addons for Contact Form 7. Узнайте за секунды, какая версия работает на вашем сайте, с WP Lens.

17 известных уязвимостей

2 критичных · 2 с публичным эксплойтом · последняя 30 сент. 2026 г.

Уязвимости

  • CVE-2026-82901

    Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field

    Критич. 9.8

  • CVE-2022-47586

    WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

    Критич. 9.8

  • CVE-2023-30495

    WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

    Высокий 8.1

  • CVE-2023-47693

    WordPress Ultimate Addons for Contact Form 7 plugin <= 3.2.6 - Broken Access Control vulnerability

    Высокий 7.5

  • CVE-2026-96833

    WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.51 - PHP Object Injection vulnerability

    Высокий 7.2

  • CVE-2025-6220

    Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'

    Высокий 7.2

  • CVE-2026-65439

    WordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerability

    Высокий 7.1

  • CVE-2026-95586

    WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.50 - Cross Site Scripting (XSS) vulnerability

    Средний 6.5

  • CVE-2026-32460

    WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.36 - Cross Site Scripting (XSS) vulnerability

    Средний 6.5

  • CVE-2023-1615

    The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in versions up to, and inc

    Средний 6.5

  • CVE-2026-12801

    Ultra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Attributes

    Средний 6.4

  • CVE-2025-6212

    Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module

    Средний 6.1

  • CVE-2023-49766

    WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

    Средний 6.1

  • CVE-2023-30493

    WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

    Средний 6.1

  • CVE-2025-6756

    Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode

    Средний 5.4

  • CVE-2026-24945

    WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.34 - Broken Access Control vulnerability

    Средний 5.3

  • CVE-2025-14356

    Ultra Addons for Contact Form 7 <= 3.5.33 - Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDF

    Средний 4.3

← К каталогу