Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Ultra Addons for Contact Form 7 — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Ultra Addons for Contact Form 7, with AI-generated Chinese analysis, references, and POCs.

Vendor: themefic

CVE IDTitleCVSSSeverityPaused
CVE-2025-14356 Ultra Addons for Contact Form 7 <= 3.5.33 - Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDF CWE-639 4.3 Medium2025-12-12
CVE-2025-6756 Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode CWE-79 6.4 Medium2025-07-01
CVE-2025-6212 Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module CWE-79 7.2 High2025-06-26
CVE-2025-6220 Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options' CWE-434 7.2 High2025-06-18

All 4 known CVE vulnerabilities affecting Ultra Addons for Contact Form 7 with full Chinese analysis, references, and POCs where available.