Ultimate Addons For Contact Form 7 Security Vulnerabilities and Issues — Ultimate Addons For Contact Form 7 CVE List

ThemeficUltimate Addons For Contact Form 7

10 matches found

CVE•added 2023/12/14 3:42 p.m.•97 views

CVE-2023-49766

CVE-2023-49766 affects Themefic Ultimate Addons for Contact Form 7 (WordPress plugin)

7.1CVSS7.1AI score0.00403EPSS

Save

CVE•added 2023/06/09 5:33 a.m.•80 views

CVE-2023-1615

CVE-2023-1615 affects the Ultimate Addons for Contact Form 7 WordPress plugin. A SQL Injection via the id parameter exists in versions up to and including 3.1.23, allowing authenticated users of any level to append extra SQL queries and potentially exfiltrate data. Multiple sources confirm the is...

8.8CVSS6.8AI score0.0082EPSS

Save

CVE•added 2023/08/14 7:10 p.m.•62 views

CVE-2023-2803

The CVE-2023-2803 issue affects the WordPress plugin Ultimate Addons for Contact Form 7 (versions before 3.1.29). The root cause is improper sanitisation/escaping of a parameter before output, leading to a Reflected XSS that could compromise high-privilege users (e.g., admin). Impact is reflected...

6.1CVSS6AI score0.00486EPSS

Save

CVE•added 2025/06/18 11:16 a.m.•62 views

CVE-2025-6220

The CVE-2025-6220 entry concerns the Ultra Addons for Contact Form 7 WordPress plugin (versions

7.2CVSS7.3AI score0.00932EPSS

SaveWeb

CVE•added 2023/12/20 5:09 p.m.•61 views

CVE-2023-30495

CVE-2023-30495 is an SQL Injection vulnerability in Themefic Ultimate Addons for Contact Form 7. Affected: Ultimate Addons for Contact Form 7

8.5CVSS8.6AI score0.00625EPSS

Save

CVE•added 2023/08/14 7:10 p.m.•60 views

CVE-2023-2802

CVE-2023-2802 affects the WordPress plugin Ultimate Addons for Contact Form 7 (before 3.1.29). The issue is failure to sanitize/escape certain settings, enabling Stored XSS by high-privilege users (e.g., admin), even when unfiltered_html is disallowed (such as in multisite). The NVD entry documen...

4.8CVSS4.7AI score0.0047EPSS

SaveWeb

CVE•added 2023/06/19 11:58 a.m.•55 views

CVE-2022-47586

CVE-2022-47586 concerns the WordPress plugin Ultimate Addons for Contact Form 7 (Themefic) with versions

9.8CVSS9.5AI score0.00652EPSS

Save

CVE•added 2023/09/27 10:54 a.m.•44 views

CVE-2023-30493

CVE-2023-30493 is an Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability affecting Themefic Ultimate Addons for Contact Form 7, version

7.1CVSS6.1AI score0.0033EPSS

Save

CVE•added 2025/06/26 9:22 a.m.•40 views

CVE-2025-6212

The CVE-2025-6212 entry details a stored XSS in the Ultra Addons for Contact Form 7 WordPress plugin (versions 3.5.11–3.5.19). Root cause: insufficient input sanitization and output escaping in the Database module, with unfiltered field names stored alongside sanitized values. The admin AJAX endp...

7.2CVSS5.8AI score0.00257EPSS

Save

CVE•added 2025/07/01 9:25 a.m.•38 views

CVE-2025-6756

CVE-2025-6756 concerns Ultra Addons for Contact Form 7 (WordPress). The vulnerability is a Stored Cross-Site Scripting flaw in the UACF7_CUSTOM_FIELDS shortcode, arising from insufficient input sanitization and output escaping for user-supplied attributes. Exploitation requires authentication at ...

6.4CVSS5.8AI score0.00209EPSS

Save