CVE-2026-114432 | Contact Form 7 Plugin up to 6.2.3 on WordPress unrestricted upload

SecurityVulns

A vulnerability described as critical has been identified in Contact Form 7 Plugin up to 6.2.3 on WordPress. The impacted element is an unknown function. The manipulation results in unrestricted upload.

This vulnerability is known as CVE-2026-114432. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More