Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

1 matching record.

1. 38
   CVE NVD 2h ago

   The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the…

   The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the _getObjAttr function in all versions up to, and including, 3.5.54. This makes it…

   CVSS 9.8 CVE-2026-102435 Themefic Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Themefic&limit=100. RSS for this section: feed.xml.