Contact Form 7 Signature Addon CVE Debriefs

Contact Form 7 Signature Addon CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Contact Form 7 Signature Addon CVE published 2026-10-17

CVE-2026-104246

The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 is vulnerable to path traversal, allowing unauthenticated users to attach arbitrary files to a form's outgoing email. This vulnerability affects WordPress installations with the Contact Form 7 Signature Addon plugin. Defenders should assess exposure, verify file attachment handling, and update the plugin if necessary. The vulnerability has [truncated]