ultimate-addons-for-contact-form-7 vulnerabilities
CVEs whose affected-version data names the ultimate-addons-for-contact-form-7 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-96833High· 7.2Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.
Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.
▾ TwilightThemefic · ultimate-addons-for-contact-form-7EPSS 0.39%via NVD
CVE-2026-95586Medium· 6.5Contributor Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <= 3.5.50 versions.
Contributor Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <= 3.5.50 versions.
▾ SunlitThemefic · ultimate-addons-for-contact-form-7EPSS 0.22%via NVD