CVE-2026-96833

Published 30 September 2026 · tracked since 1 October 2026

Description

Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-97246 MEDIUM 4.9
• CVE-2026-97248 CRITICAL 9.8
• CVE-2026-97197 HIGH 7.5
• CVE-2026-96832 HIGH 7.2
• CVE-2026-96831 HIGH 8.8
• CVE-2026-96816 HIGH 7.1
• CVE-2026-96343 HIGH 7.2
• CVE-2026-96344 HIGH 7.2
• CVE-2026-95531 HIGH 8.8
• CVE-2026-94677 HIGH 7.2

→ Open the live CVE board · all tools