Threats tagged 'ghsa-p9ff-7qxh-95p9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.5	CVE-2026-100386The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to High7.52026-11-10GCVE DatabaseCVE-2026-100386 The Ultra Addons for Contact Form 7 WordPress plugin is vulnerable to a directory traversal flaw in all versions up to and including 3.5.54. This vulnerability allows unauthenticated attackers to read arbitrary files on the server via the uacf7_wpcf7_mail_components function. Exploitation requires the PDF Generator addon to be active and a PDF body template configured by an administrator for the targeted contact form. Report on CVE-2026-100386 Vulnerability CWE-22 #ghsa-p9ff-7qxh-95p9	GCVE Database	2026-11-10

Page 1 of 1