Ultimate Addons For Contact Form 7
Approved changes feed: RSS · Atom
cpe:2.3:a:themefic:ultimate_addons_for_contact_form_7:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Themefic (69fae1e1-81cb-5dd5-92a6-9e186c18d282) |
|---|---|
| Product | Ultimate Addons For Contact Form 7 (3cba3e43-3cbb-5993-8218-d639997cead0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-32460 |
vulnerable | 2026-06-08 07:57:17.617073 |
WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.36 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for Contact Form 7: from n/a through <= 3.5.36.
Published: 2026-03-13T11:42:23.111Z
Updated: 2026-04-29T09:51:59.939Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24945 |
vulnerable | 2026-06-08 07:53:18.743062 |
WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.34 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for Contact Form 7: from n/a through <= 3.5.34.
Published: 2026-02-03T14:08:33.446Z
Updated: 2026-04-28T16:14:51.251Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49766 |
vulnerable | 2026-06-08 06:16:10.415320 |
WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Ultimate Addons for Contact Form 7 allows Stored XSS.This issue affects Ultimate Addons for Contact Form 7: from n/a through 3.2.0.
Published: 2023-12-14T15:42:37.230Z
Updated: 2026-04-28T16:08:57.134Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47693 |
vulnerable | 2026-06-08 06:14:25.413537 |
WordPress Ultimate Addons for Contact Form 7 plugin <= 3.2.6 - Broken Access Control vulnerability
HIGH (7.5)
Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for Contact Form 7: from n/a through <= 3.2.6.
Published: 2025-01-02T12:00:38.749Z
Updated: 2026-04-29T09:51:50.865Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30495 |
vulnerable | 2026-06-08 06:04:39.663065 |
WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Ultimate Addons for Contact Form 7.This issue affects Ultimate Addons for Contact Form 7: from n/a through 3.1.23.
Published: 2023-12-20T17:09:25.312Z
Updated: 2026-04-28T16:08:18.739Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30493 |
vulnerable | 2026-06-08 06:04:39.659400 |
WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.2.0 versions.
Published: 2023-09-27T10:54:37.117Z
Updated: 2026-04-28T16:08:19.071Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47586 |
vulnerable | 2026-06-08 05:50:40.765354 |
WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection
HIGH (8.2)
Unauth. SQL Injection (SQLi) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.1.23 versions.
Published: 2023-06-19T11:58:10.394Z
Updated: 2026-04-28T16:07:57.872Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.