WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

CVE-2022-47586

What is CVE-2022-47586?

The Themefic Ultimate Addons for Contact Form 7 plugin, up to version 3.1.23, contains an unauthenticated SQL injection vulnerability. This allows attackers to manipulate SQL queries by injecting malicious code. An attacker can exploit this weakness to gain unauthorized access to sensitive data, potentially leading to data breaches or unauthorized changes within the WordPress environment. It is crucial for users of this plugin to apply patches or updates immediately to safeguard their sites from possible exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References