Browse CVEs

MEDIUM 5.4 CVE-2025-6756 The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's UACF7_CUSTOM_FIELDS shortcode … Ultimate Addons For Contact Form 7 3.5.22+ Fix from $1,6002025-07-01 MEDIUM 6.1 CVE-2025-6212 The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Database module in versions 3.5.11 to 3… Ultimate Addons For Contact Form 7 3.5.20+ Fix from $1,6002025-06-26 HIGH 7.2 CVE-2025-6220 The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_opt… Ultimate Addons For Contact Form 7 3.5.13+ Fix from $1,9502025-06-18 HIGH 7.2 CVE-2025-47549 Unrestricted Upload of File with Dangerous Type vulnerability in Themefic BEAF beaf-before-and-after-gallery allows Upload a Web Shell to a Web Serve… Ultimate Before After Image Slider \& Gallery after 4.6.10 Fix from $1,9502025-05-07 HIGH 7.2 CVE-2025-47550 Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Instantio instantio allows Upload a Web Shell to a Web Server.This issue af… Instantio after 3.3.16 Fix from $1,9502025-05-07 CRITICAL 9.1 CVE-2025-24650 Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic allows Upload a Web Shell to a Web Server.This issue affect… Tourfic 2.15.4+ Fix from $2,3002025-01-24 MEDIUM 6.5 CVE-2024-12032 The Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking plugin for WordPress is vulnerable to… Tourfic 2.15.4+ Fix from $1,6002024-12-25 HIGH 8.8 CVE-2024-29136 Deserialization of Untrusted Data vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.17. Tourfic 2.11.19+ Fix from $1,9502024-03-19 MEDIUM 6.1 CVE-2024-29137 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tou… Tourfic after 2.11.7 Fix from $1,6002024-03-19 HIGH 8.8 CVE-2024-29135 Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.15. Tourfic 2.11.16+ Fix from $1,9502024-03-19 MEDIUM 5.4 CVE-2024-29134 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tou… Tourfic 2.11.9+ Fix from $1,6002024-03-19 HIGH 8.1 CVE-2023-30495 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Ultimate Addons for Contact Form 7.Thi… Ultimate Addons For Contact Form 7 3.1.24+ Fix from $1,9502023-12-20 MEDIUM 6.1 CVE-2023-49766 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Ultimate Addons for Contact Form 7 all… Ultimate Addons For Contact Form 7 after 3.2.0 Fix from $1,6002023-12-14 MEDIUM 6.1 CVE-2023-30493 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.2.0 versions. Ultimate Addons For Contact Form 7 3.2.1+ Fix from $1,6002023-09-27 MEDIUM 6.1 CVE-2023-2803 The Ultimate Addons for Contact Form 7 WordPress plugin before 3.1.29 does not sanitise and escape a parameter before outputting it back in the page,… Ultimate Addons For Contact Form 7 3.1.29+ Fix from $1,6002023-08-14 CRITICAL 9.8 CVE-2022-47586 Unauth. SQL Injection (SQLi) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.1.23 versions. Ultimate Addons For Contact Form 7 3.1.24+ Fix from $2,3002023-06-19 MEDIUM 6.5 CVE-2023-1615 The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in versions up to, and including, 3… Ultimate Addons For Contact Form 7 after 3.1.23 Fix from $1,6002023-06-09