Vulnerabilities / Ultra Addons for Contact Form 7
Ultra Addons for Contact Form 7 vulnerabilities
Advisories WPSec published for Ultra Addons for Contact Form 7. Other sources may list more. Its attack surface: Ultra Addons for Contact Form 7 on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-11 | WPSEC-2026-0776 | Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated HTML Injection to Server-Side Request Forgery via PDF Generator Form Field Values | Medium 5.4 | 3.5.55 |
| 2026-10-11 | WPSEC-2026-0775 | Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Stored Cross-Site Scripting via Form File Uploads | High 7.2 | 3.5.55 |
License: CC BY 4.0