Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Plugin de WordPress

Ultra Addons for Contact Form 7

23 expedientes en el radar

Comprueba tu versión de Ultra Addons for Contact Form 7 Sólo las que se están explotando

[■] Registro

Vulnerabilidades (23)

  1. 7,5 Alta

    CVE-2026-100386: recorrido de rutas (path traversal) en Ultra Addons for Contact Form 7

    CVE-2026-100386

    T−4d 9 nov. 2026

  2. 9,8 Crít.

    CVE-2026-102435: deserialización de datos no fiables en Ultra Addons for Contact Form 7

    CVE-2026-102435

    T−12d 2 nov. 2026

  3. 7,2 Alta

    CVE-2026-103999: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

    CVE-2026-103999

    T−30d 15 oct. 2026

  4. 9,8 Crít.

    CVE-2026-82901: subida de ficheros peligrosos en Ultra Addons for Contact Form 7

    CVE-2026-82901

    T−48d 26 sept. 2026

  5. 6,6 Media

    CVE-2026-96833: deserialización de datos no fiables en Ultra Addons for Contact Form 7

    CVE-2026-96833

    T−51d 24 sept. 2026

  6. 6,4 Media

    CVE-2026-95586: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

    CVE-2026-95586

    T−53d 22 sept. 2026

  7. 9,8 Crít.

    CVE-2026-84750: subida de ficheros peligrosos en Ultra Addons for Contact Form 7

    CVE-2026-84750

    T−58d 17 sept. 2026

  8. 6,4 Media

    CVE-2026-12801: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

    CVE-2026-12801

    T−100d 6 ago. 2026

  9. 7,2 Alta

    CVE-2026-65439: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

    CVE-2026-65439

    T−110d 27 jul. 2026

  10. 6,4 Media

    CVE-2026-32460: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

    CVE-2026-32460

    T−245d 14 mar. 2026

  11. 5,3 Media

    CVE-2026-24945: falta de autorización en Ultra Addons for Contact Form 7

    CVE-2026-24945

    T−336d 13 dic. 2025

  12. 4,3 Media

    CVE-2025-14356: acceso a datos de otros usuarios (IDOR) en Ultra Addons for Contact Form 7

    CVE-2025-14356

    T−337d 11 dic. 2025

  13. 6,4 Media

    CVE-2025-6756: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

    CVE-2025-6756

    T−501d 30 jun. 2025

  14. 7,2 Alta

    CVE-2025-6212: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

    CVE-2025-6212

    T−506d 25 jun. 2025

  15. 7,2 Alta

    CVE-2025-6220: subida de ficheros peligrosos en Ultra Addons for Contact Form 7

    CVE-2025-6220

    T−514d 18 jun. 2025

  16. 6,1 Media

    CVE-2023-49766: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

    CVE-2023-49766

    T−1076d 4 dic. 2023

  17. 5,3 Media

    CVE-2023-47693: falta de autorización en Ultra Addons for Contact Form 7

    CVE-2023-47693

    T−1101d 9 nov. 2023

  18. 6,1 Media

    CVE-2023-30493: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

    CVE-2023-30493

    T−1174d 28 ago. 2023

  19. 4,4 Media

    CVE-2023-2802: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

    CVE-2023-2802

    T−1209d 24 jul. 2023

  20. 6,1 Media

    CVE-2023-2803: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

    CVE-2023-2803

    T−1209d 24 jul. 2023

  21. 8,8 Alta

    CVE-2023-1615: inyección SQL en Ultra Addons for Contact Form 7

    CVE-2023-1615

    T−1255d 8 jun. 2023

  22. 9,8 Crít.

    CVE-2022-47586: inyección SQL en Ultra Addons for Contact Form 7

    CVE-2022-47586

    T−1285d 9 may. 2023

  23. 8,8 Alta

    CVE-2023-30495: inyección SQL en Ultra Addons for Contact Form 7

    CVE-2023-30495

    T−1300d 24 abr. 2023