CVE-2026-82901
Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the 'uacf7_wpcf7_mail_components' function in all versions up to, and including, 3.5.50. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Note: This is only exploitable when the plugin's PDF Generator module is enabled, which is disabled by default.
| CWE | CWE-434 |
| Vendor | themefic |
| Product | ultra addons for contact form 7 |
| Published | Sep 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for themefic ultra addons for contact form 7
Be the first to know when new critical vulnerabilities affecting themefic ultra addons for contact form 7 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
themefic / Ultra Addons for Contact Form 7
0 ≤ 3.5.50
References
wordfence.com: https://www.wordfence.com/threat-intel/vulnerabilities/id/872e1a05-aacc-44fa-93c1-8c3f7b2fb46d?source=cve plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/tags/3.5.48/addons/signature/ultimate-signature.php#L133 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/tags/3.5.48/addons/signature/ultimate-signature.php#L192 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/tags/3.5.48/addons/signature/ultimate-signature.php#L300 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/tags/3.5.48/addons/pdf-generator/pdf-generator.php#L608 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/tags/3.5.48/addons/pdf-generator/pdf-generator.php#L807 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/changeset/3698232/ultimate-addons-for-contact-form-7
Credits
Supakiad S. (m3ez)