High · 8.5 CVE-2023-30495 EUVD-2023-34910GHSA-83mm-r262-4333

WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

Published Dec 20, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: themefic Product: Ultimate Addons for Contact Form 7

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Ultimate Addons for Contact Form 7.This issue affects Ultimate Addons for Contact Form 7: from n/a through 3.1.23.

Affected products

Vendor	Product	Affected	Fixed
Themefic	Ultimate Addons for Contact Form 7	≤ 3.1.23	—

References

https://patchstack.com/database/vulnerability/ultimate-addons-for-contact-form-7/wordpress-ultimate-addons-for-contact-form-7-plugin-3-1-23-sql-injection-vulnerability?_s_id=cve vdb-entry