WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

CVE-2022-47586

Summary

The Themefic Ultimate Addons for Contact Form 7 plugin, up to version 3.1.23, contains an unauthenticated SQL injection vulnerability. This allows attackers to manipulate SQL queries by injecting malicious code. An attacker can exploit this weakness to gain unauthorized access to sensitive data, potentially leading to data breaches or unauthorized changes within the WordPress environment. It is crucial for users of this plugin to apply patches or updates immediately to safeguard their sites from possible exploitation.

References