CVE-2026-96833

The vulnerability in Ultimate Addons for Contact Form 7 versions up to 3.5.51 allows for PHP Object Injection, which can be exploited to execute arbitrary PHP code on the server. This poses a significant risk as it could lead to unauthorized access, data manipulation, or complete system compromise. Organizations using this plugin should prioritize patching or upgrading to mitigate potential exploitation.