Skip to content
OpenAdvisories
High · 8.6 CVE-2026-40769 EUVD-2026-36978GHSA-v5gh-23jx-pj59

WordPress Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field plugin <= 1.0.6 - Arbitrary File Deletion vulnerability

Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack

Vendor: Satinder Singh Product: Contact Form Extender for Divi &#8211; Save Entries, File Upload &amp; Country Code Field

Description

Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi &#8211; Save Entries, File Upload &amp; Country Code Field <= 1.0.6 versions.

Affected products

VendorProductAffectedFixed
Satinder Singh Contact Form Extender for Divi &#8211; Save Entries, File Upload &amp; Country Code Field ≤ 1.0.6 —

References