Skip to content
Threat Feed
Subscribe

Vendor

Themefic

2 briefs RSS
critical advisory

Arbitrary File Upload Vulnerability in Ultra Addons for Contact Form 7

An arbitrary file upload vulnerability in the Ultra Addons for Contact Form 7 plugin, tracked as CVE-2026-82901, allows unauthenticated attackers to execute arbitrary code when the PDF Generator module is enabled.

PoC Ultra Addons for Contact Form 7
2t 1c updated
high advisory

Privilege Escalation in Eventin WordPress Plugin

The Eventin WordPress plugin (<= 4.1.23) contains a vulnerability that allows users with ID 1 to bypass capability checks and escalate privileges to administrator level.

Eventin wordpress privilege-escalation plugin-vulnerability
1t 1c