Description
Unauth. SQL Injection (SQLi) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.1.23 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themefic | Ultimate Addons for Contact Form 7 | ≤ 3.1.23 | — |
High · 8.2
CVE-2022-47586
EUVD-2022-50346GHSA-chc6-rxgw-xf3r
WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection
Published Jun 19, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack