Ultra Addons for Contact Form 7

Уязвимости

• CVE-2026-82901без авторизации≤ 3.5.50

  Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field

  Критич. 9.8

• CVE-2022-47586без авторизации · нужен клик≤ 3.1.23

  WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

  Критич. 9.8

• CVE-2023-30495нужен вход≤ 3.1.23

  WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

  Высокий 8.1

• CVE-2023-47693без авторизации≤ 3.2.6

  WordPress Ultimate Addons for Contact Form 7 plugin <= 3.2.6 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2026-96833редактор+≤ 3.5.51

  WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.51 - PHP Object Injection vulnerability

  Высокий 7.2

• CVE-2025-6220админ≤ 3.5.12

  Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'

  Высокий 7.2

• CVE-2026-65439без авторизации · нужен клик≤ 3.5.45

  WordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-32460нужен вход≤ 3.5.36

  WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.36 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2023-1615нужен вход

  The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in versions up to, and inc

  Средний 6.5

• CVE-2026-95586участник+≤ 3.5.50

  WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.50 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-12801участник+≤ 3.5.43

  Ultra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Attributes

  Средний 6.4

• CVE-2025-6212без авторизации≤ 3.5.19

  Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module

  Средний 6.1

• CVE-2023-49766без авторизации · нужен клик≤ 3.2.0

  WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2023-30493без авторизации · нужен клик≤ 3.2.0

  WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2025-6756участник+≤ 3.5.21

  Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode

  Средний 5.4

• CVE-2026-24945без авторизации≤ 3.5.34

  WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.34 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2025-14356подписчик+≤ 3.5.33

  Ultra Addons for Contact Form 7 <= 3.5.33 - Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDF

  Средний 4.3