CVE-2026-12801

The CVE-2026-12801 entry concerns the Ultra Addons for Contact Form 7 plugin (WordPress). Affected: all versions up to and including 3.5.43. Vulnerability: Stored Cross-Site Scripting via the Range Slider attributes data-label and data-separator, caused by insufficient input sanitization and insu...