VYPR

Apache

by Ubuntu

CVEs (1)

  • CVE-2026-84750MedSep 19, 2026
    risk 0.42cvss 6.5epss 0.00

    The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, and stores them at a predictable public path with the attacker-chosen extension intact, allowing unauthenticated users to…