https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:27:52 +0000 https://db.gcve.eu/vuln/cve-2026-82901 <p><strong>Affected:</strong> themefic Ultra Addons for Contact Form 7</p> <p>The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the &#39;uacf7_wpcf7_mail_components&#39; function in all versions up to, and including, 3.5.50. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible. Note: This is only exploitable when the plugin&#39;s PDF Generator module is enabled, which is disabled by default.</p> <p><strong>Affected:</strong> themefic Ultra Addons for Contact Form 7</p> <p>The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the &#39;uacf7_wpcf7_mail_components&#39; function in all versions up to, and including, 3.5.50. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible. Note: This is only exploitable when the plugin&#39;s PDF Generator module is enabled, which is disabled by default.</p> https://db.gcve.eu/vuln/cve-2026-82901