WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-08-07
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-addons-for-contact-form-7
Published
2023-06-08
Title
Ultimate Addons for Contact Form 7 < 3.1.24 - Subscriber+ SQL Injection
Slug
ultimate-addons-for-contact-form-7
Published
2023-05-09
Title
Ultimate Addons for Contact Form 7 < 3.1.24 - Unauthenticated SQLi
Slug
ultimate-addons-for-contact-form-7
Published
2023-06-08
Title
Ultimate Addons for Contact Form 7 3.1.23 - Subscriber+ SQLi
Slug
ultimate-addons-for-contact-form-7
Published
2023-07-24
Title
Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSS
Slug
ultimate-addons-for-contact-form-7
Published
2023-07-24
Title
Ultimate Addons for Contact Form 7 < 3.1.29 - Admin+ Stored XSS
Slug
ultimate-addons-for-contact-form-7
Published
2023-08-28
Title
Ultimate Addons for Contact Form 7 < 3.2.1 - Reflected XSS
Slug
ultimate-addons-for-contact-form-7
Published
2023-11-09
Title
Ultimate Addons for Contact Form 7 < 3.2.11 - Missing Authorization
Slug
ultimate-addons-for-contact-form-7
Published
2023-12-04
Title
Ultimate Addons for Contact Form 7 < 3.2.1 - Reflected Cross-Site Scripting
Slug
ultimate-addons-for-contact-form-7
Published
2025-06-17
Title
Ultimate Addons for Contact Form 7 < 3.5.13 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'
Slug
ultimate-addons-for-contact-form-7
Published
2025-06-25
Title
Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module
Slug
ultimate-addons-for-contact-form-7
Published
2025-06-30
Title
Ultra Addons for Contact Form 7 < 3.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode
Slug
ultimate-addons-for-contact-form-7
Published
2025-12-11
Title
Ultra Addons for Contact Form 7 < 3.5.34 - Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDF
Slug
ultimate-addons-for-contact-form-7
Published
2025-12-13
Title
Ultimate Addons for Contact Form 7 < 3.5.35 - Missing Authorization
Slug
ultimate-addons-for-contact-form-7
Published
2026-03-14
Title
Ultra Addons for Contact Form 7 < 3.5.37 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-addons-for-contact-form-7
Published
2026-07-27
Title
Ultimate Addons for Contact Form 7 < 3.5.46 - Unauthenticated Stored Cross-Site Scripting
Slug
ultimate-addons-for-contact-form-7
Published
2026-08-06
Title
Ultra Addons for Contact Form 7 < 3.5.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Attributes
Slug
ultimate-addons-for-contact-form-7
Published
2026-09-22
Title
Ultra Addons for Contact Form 7 < 3.5.51 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-addons-for-contact-form-7
Published
2026-09-17
Title
Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Field
Slug
ultimate-addons-for-contact-form-7
Published
2026-09-26
Title
Ultra Addons for Contact Form 7 < 3.5.51 - Unauthenticated Arbitrary File Upload via Signature Form Field
Slug
ultimate-addons-for-contact-form-7
Published
2026-09-24
Title
Ultra Addons for Contact Form 7 < 3.5.52 - Authenticated (Editor+) PHP Object Injection
Slug
ultimate-addons-for-contact-form-7
Published
2026-10-15
Title
Ultra Addons for Contact Form 7 < 3.5.55 - Unauthenticated Stored Cross-Site Scripting via File Upload
Slug
ultimate-addons-for-elementor
Published
2024-04-15
Title
Mega Addons For Elementor < 1.9 - Missing Authorization
Slug
ultimate-addons-for-elementor
Published
2024-08-12
Title
Mega Addons For Elementor <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-addons-for-gutenberg
Published
2020-04-08
Title
Gutenberg Blocks - Ultimate Addons for Gutenberg < 1.14.8 - Authenticated Settings Change