https://vulnerability.circl.lu/sightings/feed 2026-09-24T22:21:44.667401+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c287c8ae-550f-410b-aabb-11b961fb2910/export 2026-09-24T22:21:44.693938+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c287c8ae-550f-410b-aabb-11b961fb2910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-84750", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvun3mktk324", "content": "Ultra Addons for Contact Form 7 (v3.2.4 \u2013 3.5.50) has a CRITICAL file upload flaw. Attackers can gain RCE or XSS. Upgrade to 3.5.51+ immediately. https://radar.offseq.com/threat/cve-2026-84750-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ultra-addons-for-contact-cea8950917a550ac #Of...", "creation_timestamp": "2026-09-19T12:00:27.049564Z"} 2026-09-19T12:00:27.049564+00:00 https://vulnerability.circl.lu/sighting/12e4e497-f38a-47b1-8c87-a180b938a1a1/export 2026-09-24T22:21:44.697158+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "12e4e497-f38a-47b1-8c87-a180b938a1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-84750", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117297592669715483", "content": "Ultra Addons for Contact Form 7 (<3.5.51) is vulnerable (CVE-2026-84750, CRITICAL). Unrestricted file upload enables unauthenticated RCE on Debian/Ubuntu Apache (.phar) or stored XSS. Upgrade to 3.5.51+ ASAP. https://radar.offseq.com/threat/cve-2026-84750-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ultra-addons-for-contact-cea8950917a550ac #OffSeq #WordPress #Infosec #RCE", "creation_timestamp": "2026-09-19T12:00:25.049859Z"} 2026-09-19T12:00:25.049859+00:00