Themefic Ultimate Addons for Contact Form

2 known vulnerabilities in Themefic Ultimate Addons for Contact Form, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-96833 CVSS 7.2 high Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.
  • CVE-2026-95586 CVSS 6.5 medium Contributor Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <= 3.5.50 versions.