Skip to content
OpenAdvisories

Vendor

themefic

58 known vulnerabilities.

Products

Ultimate Addons for Contact Form 7 10 Tourfic 10 Hydra Booking 9 Ultra Addons for Contact Form 7 9 Hydra Booking — Appointment Scheduling & Booking Calendar 4 Instantio 3 Travelfic Toolkit 3 Tourfic – Travel Booking, Hotel Booking & Car Rental WordPress Plugin 3 Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental 2 BEAF 2 Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin 1 Ultra Addons for WPForms 1 Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-102435

    Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Field

    The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the _getObjAttr function in all versions up to, and including, 3.5.54. This makes it possible for unauthenticated att…

    themefic Ultra Addons for Contact Form 7 Web / CMS
  • Critical 9.8
    CVE-2026-82901 Public exploit Scanner template

    Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field

    The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the 'uacf7_wpcf7_mail_components' function in all versions up to, and including, 3.5.50. This makes it possible for una…

    themefic Ultra Addons for Contact Form 7 Web / CMS
  • Critical 9.1
    CVE-2025-47549 Public exploit

    WordPress BEAF plugin <= 4.6.10 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Themefic BEAF beaf-before-and-after-gallery allows Upload a Web Shell to a Web Server.This issue affects BEAF: from n/a through <= 4.6.10.

    themefic BEAF
  • Critical 9.1
    CVE-2025-24650

    WordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic allows Upload a Web Shell to a Web Server.This issue affects Tourfic: from n/a through <= 2.15.3.

    themefic Tourfic
  • Critical 9.9
    CVE-2024-29135

    WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.15.

    themefic Tourfic