CPE
The Ultra Addons for Contact Form 7 WordPress plugin is vulnerable to directory traversal via the uacf7_wpcf7_mail_components function, allowing unauthenticated file disclosure when specific PDF generation features are enabled.