CVE-2026-120559 | Contact Form Extender for Divi Plugin up to 1.0.6 on WordPress File Path Validation cfefd_remove_uploaded_file path traversal

November 3, 2026 Yanac

A vulnerability identified as critical has been detected in Contact Form Extender for Divi Plugin up to 1.0.6 on WordPress. This issue affects the function cfefd_remove_uploaded_file of the component File Path Validation. This manipulation causes path traversal.

The identification of this vulnerability is CVE-2026-120559. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More