<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: themefic-ultra-addons-for-contact-form-7</title><description>Every new CVE for themefic-ultra-addons-for-contact-form-7.</description><link>https://agentprime.io/</link><item><title>CVE-2026-102435: Ultra Addons for Contact Form 7 &lt;= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Field</title><link>https://agentprime.io/advisories/CVE-2026-102435/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-102435/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Nov 2026 19:31:31 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-103999: Ultra Addons for Contact Form 7 &lt;= 3.5.54 - Unauthenticated Stored Cross-Site Scripting via File Upload</title><link>https://agentprime.io/advisories/CVE-2026-103999/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103999/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 05:30:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-82901: Ultra Addons for Contact Form 7 &lt;= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field</title><link>https://agentprime.io/advisories/CVE-2026-82901/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82901/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 18:28:25 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-12801: Ultra Addons for Contact Form 7 &lt;= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Attributes</title><link>https://agentprime.io/advisories/CVE-2026-12801/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12801/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 04:25:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14356: Ultra Addons for Contact Form 7 &lt;= 3.5.33 - Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDF</title><link>https://agentprime.io/advisories/CVE-2025-14356/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14356/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Dec 2025 06:32:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-6756: Ultra Addons for Contact Form 7 &lt;= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode</title><link>https://agentprime.io/advisories/CVE-2025-6756/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-6756/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Jul 2025 09:25:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-6212: Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module</title><link>https://agentprime.io/advisories/CVE-2025-6212/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-6212/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Jun 2025 09:22:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-6220: Ultimate Addons for Contact Form 7 &lt;= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via &apos;save_options&apos;</title><link>https://agentprime.io/advisories/CVE-2025-6220/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-6220/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Jun 2025 11:16:31 GMT</pubDate><category>CVE</category></item></channel></rss>