Ultimate Addons for Contact Form 7 vulnerabilities

3 known vulnerabilities in Ultimate Addons for Contact Form 7 from Themefic. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Ultra Addons for Contact Form 7: Unrestricted Upload of File with Dangerous Type

  CVE-2025-6220Jun 18, 2025ThemeficEPSS 1.18%

  The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_options' function in all versions up to, and including, 3.5.12. This makes it possible for authenticated attackers

• 7.5 High severity

  Ultimate Addons for Contact Form 7: Missing Authorization

  CVE-2023-47693Jan 2, 2025Themefic

  Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for Contact Form 7: from n/a throug

• 8.1 High severity

  Ultimate Addons for Contact Form 7: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-30495Dec 20, 2023Themefic

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Ultimate Addons for Contact Form 7.This issue affects Ultimate Addons for Contact Form 7: from n/a through 3.1.23.