CVE-2026-65439

Ultimate Addons for Contact Form 7 versions up to 3.5.45 are vulnerable to an unauthenticated Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a significant risk as it can lead to session hijacking, data theft, or defacement of the website. Organizations using this plugin should prioritize immediate updates to mitigate potential exploitation.