Pricing
Case studies
Login
Start trial
Ultimate Addons for Contact Form 7
Themefic
Developer
3.5.34
Latest version
60,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
9 fixed
5 Mitigation rules
Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDF vulnerability
<= 3.5.33
4 days ago
Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode vulnerability
<= 3.5.21
Jun 30, 2025
Unauthenticated Stored Cross-Site Scripting vulnerability
3.5.11-3.5.19
Jun 26, 2025
Authenticated (Administrator+) Arbitrary File Upload via 'save_options' vulnerability
<= 3.5.12
Jun 18, 2025
Unauthenticated Cross Site Scripting (XSS) vulnerability
<= 3.2.0
Dec 4, 2023
Broken Access Control vulnerability
<= 3.2.6
Nov 9, 2023
Reflected Cross Site Scripting (XSS) vulnerability
<= 3.2.0
Aug 28, 2023
SQL Injection
<= 3.1.23
May 9, 2023
SQL Injection vulnerability
<= 3.1.23
Apr 24, 2023