CVE-2025-6220

概要

参考情報

• d0n601/CVE-2025-6220 · Exploit
• plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/trunk/admin/tf-options/classes/UACF7_Settings.php · Product
• plugins.trac.wordpress.org/changeset/3288584 · Patch
• ryankozak.com/posts/cve-2025-6220 · Exploit
• wordfence.com/threat-intel/vulnerabilities/id/697f3432-63b7-42d6-b188-812165cd2020 · Third Party Advisory

ultimate addons for contact form 7 のその他の脆弱性

• CVE-2025-6756中 5.4The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's UACF7_CUSTOM_FIELDS s…
• CVE-2025-6212中 6.1The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Database module in versions 3.…
• CVE-2023-30495高 8.1Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Ultimate Addons for Contact F…
• CVE-2023-49766中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Ultimate Addons for Contact F…
• CVE-2023-30493中 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.2.0 versions.