CVE-2026-84750

The Ultra Addons for Contact Form 7 WordPress plugin (versions 3.2.4 – 3.5.50 ) fails to validate file type or extension on uploads through its Signature Field , storing files at a predictable public path with the attacker-chosen extension intact. This allows unauthenticated users to upload arbit...