Vendor

Satinder Singh

2 known vulnerabilities.

Products

Contact Form Extender for Divi – Submissions DB & Extra Fields 1 Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2026-120559

Contact Form Extender for Divi Builder <= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path Traversal

The Contact Form Extender for Divi Builder plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient file path validation in the cfefd_remove_uploaded_file() function in all versions up to, and including, 1.0.6. This makes it possible …

Satinder Singh Contact Form Extender for Divi – Submissions DB & Extra Fields Web / CMS

Nov 3, 2026
High 8.6

CVE-2026-40769

WordPress Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field plugin <= 1.0.6 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field <= 1.0.6 versions.

Satinder Singh Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field

Jun 15, 2026