{"uuid": "12e4e497-f38a-47b1-8c87-a180b938a1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-84750", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117297592669715483", "content": "Ultra Addons for Contact Form 7 (<3.5.51) is vulnerable (CVE-2026-84750, CRITICAL). Unrestricted file upload enables unauthenticated RCE on Debian/Ubuntu Apache (.phar) or stored XSS. Upgrade to 3.5.51+ ASAP. https://radar.offseq.com/threat/cve-2026-84750-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ultra-addons-for-contact-cea8950917a550ac #OffSeq #WordPress #Infosec #RCE", "creation_timestamp": "2026-09-19T12:00:25.049859Z"}