CVE-2022-47586

Unauth. SQL Injection (SQLi) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.1.23 versions.

Score

CVSS 3.1 9.8 Critical

Status

Modified - audit@patchstack.com

Published

2023-06-19

Last modified

2026-04-28

Weaknesses

CWE-89

Affected products

• Ultimate Addons For Contact Form 7 (Themefic)

References

• https://patchstack.com/database/vulnerability/ultimate-addons-for-contact-form-7/wordpress-ultimate-addons-for-contact-…