CVE-2023-30495: Themefic Ultimate Addons For Contact Form 7

High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Ultimate Addons for Contact Form 7.This issue affects Ultimate Addons for Contact Form 7: from n/a through 3.1.23.

Affected products

• Themefic Ultimate Addons For Contact Form 7: before 3.1.24 (fixed in 3.1.24)

Published 2023-12-20. Last modified 2026-06-17.