CVE-2026-94589 | htplugins Extensions for CF7 Plugin up to 3.4.5 on WordPress extcf7_submit signature unrestricted upload

October 10, 2026 Yanac

A vulnerability classified as critical has been found in htplugins Extensions for CF7 Plugin up to 3.4.5 on WordPress. The affected element is the function extcf7_submit. Performing a manipulation of the argument signature results in unrestricted upload.

This vulnerability is reported as CVE-2026-94589. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More