{"vulnerability": "cve-2026-84750", "sightings": [{"uuid": "12e4e497-f38a-47b1-8c87-a180b938a1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-84750", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117297592669715483", "content": "Ultra Addons for Contact Form 7 (<3.5.51) is vulnerable (CVE-2026-84750, CRITICAL). Unrestricted file upload enables unauthenticated RCE on Debian/Ubuntu Apache (.phar) or stored XSS. Upgrade to 3.5.51+ ASAP. https://radar.offseq.com/threat/cve-2026-84750-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ultra-addons-for-contact-cea8950917a550ac #OffSeq #WordPress #Infosec #RCE", "creation_timestamp": "2026-09-19T12:00:25.049859Z"}, {"uuid": "c287c8ae-550f-410b-aabb-11b961fb2910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-84750", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvun3mktk324", "content": "Ultra Addons for Contact Form 7 (v3.2.4 \u2013 3.5.50) has a CRITICAL file upload flaw. Attackers can gain RCE or XSS. Upgrade to 3.5.51+ immediately. https://radar.offseq.com/threat/cve-2026-84750-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ultra-addons-for-contact-cea8950917a550ac #Of...", "creation_timestamp": "2026-09-19T12:00:27.049564Z"}]}