CVE-2026-95586: Contributor Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <= 3.5.50 versions.

CVE-2026-95586 · Severity: medium · CVSS 6.5 · Published 2026-09-23

Executive brief

Contributor Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <= 3.5.50 versions.