Ultimate Addons for Contact Form 7 — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Ultimate Addons for Contact Form 7, with AI-generated Chinese analysis, references, and POCs.

Vendor: psdtowpservice

CVE ID	Title	CVSS	Severity	Published
CVE-2026-95586	WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.50 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2026-09-23
CVE-2026-65439	WordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerability CWE-79	7.1	High	2026-07-27
CVE-2026-32460	WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.36 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2026-03-13
CVE-2026-24945	WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.34 - Broken Access Control vulnerability CWE-862	5.3	Medium	2026-02-03
CVE-2023-47693	WordPress Ultimate Addons for Contact Form 7 plugin <= 3.2.6 - Broken Access Control vulnerability CWE-862	7.5	High	2025-01-02
CVE-2023-30495	WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection CWE-89	8.5	High	2023-12-20
CVE-2023-49766	WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS) CWE-79	7.1	High	2023-12-14
CVE-2023-30493	WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS) CWE-79	7.1	High	2023-09-27
CVE-2023-2802	Ultimate Addons for Contact Form 7 < 3.1.29 - Admin+ Stored XSS	4.8	-	2023-08-14
CVE-2023-2803	Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSS	6.1	-	2023-08-14
CVE-2022-47586	WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection CWE-89	8.2	High	2023-06-19
CVE-2023-1615	WordPress Plugin Ultimate Addons for Contact Form SQL注入漏洞	8.8	High	2023-06-09

All 12 known CVE vulnerabilities affecting Ultimate Addons for Contact Form 7 with full Chinese analysis, references, and POCs where available.