Contact Form 7 Signature Addon

WordPress plugin · contact-form-7-signature-addon · WordPress.org ↗

Critical

High

Known total

Unfixed

Running Contact Form 7 Signature Addon on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
UNKNOWN	Contact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email Attachments CVE.org	<=4.2.2	unfixed	CVE-2026-104246	Oct 17, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.