CVE-2026-100386 | mefic Ultra Addons for Contact Form 7 Plugin up to 3.5.54 on WordPress uacf7_wpcf7_mail_components path traversal

A vulnerability categorized as problematic has been discovered in mefic Ultra Addons for Contact Form 7 Plugin up to 3.5.54 on WordPress. Affected by this issue is the function uacf7_wpcf7_mail_components. Executing a manipulation can lead to path traversal.

This vulnerability appears as CVE-2026-100386. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More