arshidkv12 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM arshidkv12 CVE published 2026-10-14

CVE-2026-107652

CVE-2026-107652 is a vulnerability in the Database Addon for Contact Form 7 – CFDB7 plugin for WordPress, which allows unauthenticated attackers to delete arbitrary files. The vulnerability exists due to the plugin's improper handling of submission fields, allowing attackers to inject crafted multipart fields. This could lead to potential data loss or corruption and increase the risk of website compromise [truncated]