Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.2.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themefic | Ultimate Addons for Contact Form 7 | ≤ 3.2.0 | — |
High · 7.1
CVE-2023-30493
EUVD-2023-34908GHSA-23h8-xfh3-46wm
WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)
Published Sep 27, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack