CVE-2026-84750

The Ultra Addons for Contact Form 7 WordPress plugin (versions 3.2.4–3.5.50 ) allows unauthenticated users to upload arbitrary files through its Signature Field because the plugin does not validate file type or extension and stores uploads at a predictable public path with the attacker-chosen ext...