Ultra Addons for Contact Form 7 — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Ultra Addons for Contact Form 7, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-82901	Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field CWE-434	9.8	Critical	2026-09-26
CVE-2026-84750	Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Field	-	-	2026-09-19
CVE-2026-12801	Ultra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Attributes CWE-79	6.4	Medium	2026-08-07
CVE-2025-14356	Ultra Addons for Contact Form 7 <= 3.5.33 - Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDF CWE-639	4.3	Medium	2025-12-12
CVE-2025-6756	Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode CWE-79	6.4	Medium	2025-07-01
CVE-2025-6212	Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module CWE-79	7.2	High	2025-06-26
CVE-2025-6220	Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options' CWE-434	7.2	High	2025-06-18

All 7 known CVE vulnerabilities affecting Ultra Addons for Contact Form 7 with full Chinese analysis, references, and POCs where available.