contact_form_extender_for_divi_submissions_db_extra_fields vulnerabilities

CVEs whose affected-version data names the contact_form_extender_for_divi_submissions_db_extra_fields package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120559High· 7.5

5d ago

Contact Form Extender for Divi Builder <= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path Traversal

The Contact Form Extender for Divi Builder plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient file path validation in the cfefd_remove_uploaded_file() function in all versions up to, and including, 1.0.6. T…

▾ Twilightsatindersingh · Contact Form Extender for Divi – Submissions DB & Extra FieldsEPSS 0.67%via CVEORG