Pricing
Case studies
Login
Start trial
Ultimate Addons for Contact Form 7
Themefic
Developer
3.5.39
Latest version
60,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
11 patched
5 Mitigation rules
Cross Site Scripting (XSS) vulnerability
<= 3.5.36
14/03/2026
Broken Access Control vulnerability
<= 3.5.34
13/12/2025
Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDF vulnerability
<= 3.5.33
11/12/2025
Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode vulnerability
<= 3.5.21
30/06/2025
Unauthenticated Stored Cross-Site Scripting vulnerability
3.5.11-3.5.19
26/06/2025
Authenticated (Administrator+) Arbitrary File Upload via 'save_options' vulnerability
<= 3.5.12
18/06/2025
Unauthenticated Cross Site Scripting (XSS) vulnerability
<= 3.2.0
04/12/2023
Broken Access Control vulnerability
<= 3.2.6
09/11/2023
Reflected Cross Site Scripting (XSS) vulnerability
<= 3.2.0
28/08/2023
SQL Injection
<= 3.1.23
09/05/2023
SQL Injection vulnerability
<= 3.1.23
24/04/2023