CVE-2026-96833

Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.

Score

CVSS 3.1 7.2 High

Status

Deferred - audit@patchstack.com

Published

2026-09-30

Last modified

2026-09-30

Weaknesses

CWE-502

Affected products

• Ultimate Addons For Contact Form 7 (Themefic)

References

• https://patchstack.com/database/wordpress/plugin/ultimate-addons-for-contact-form-7/vulnerability/wordpress-ultimate-ad…