CVE-2025-6212

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Database module in versions 3.5.11 to 3.5.19 due to insufficient input sanitization and output escaping. The unfiltered field names are stored alongside the sanitized values. Later, the admin-side AJAX endpoint ajax_get_table_data() returns those raw names as JSON column headers, and the client-side DataTables renderer injects them directly into the DOM without any HTML encoding. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

• CWE-79

• https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/trunk/addons/database/assets/js/database-pro-main.jsProduct
• https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/trunk/addons/database/database.phpProduct
• https://plugins.trac.wordpress.org/changeset/3316177/Patch
• https://wordpress.org/plugins/ultimate-addons-for-contact-form-7/#developersProduct, Release Notes
• https://www.wordfence.com/threat-intel/vulnerabilities/id/f49e48cb-7d0b-4bcf-9090-869472b8442a?source=cveThird Party Advisory

Published

Jun 26, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-62114Exposure of Sensitive System Information to an Unauthorized …5.3
• CVE-2025-62115Missing Authorization vulnerability in ThemeBoy Hide Plugins…4.3
• CVE-2025-62116Missing Authorization vulnerability in quadlayers AI Copilot…5.3
• CVE-2025-62117Cross-Site Request Forgery (CSRF) vulnerability in Jayce53 E…5.4
• CVE-2025-62118Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-62119Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2025-62120Cross-Site Request Forgery (CSRF) vulnerability in Rick Beck…5.4
• CVE-2025-62121Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2025-62122Missing Authorization vulnerability in solwininfotech Trash …5.3
• CVE-2025-62123Cross-Site Request Forgery (CSRF) vulnerability in inkthemes…4.3
• CVE-2025-62124Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2025-62125Improper Neutralization of Input During Web Page Generation …6.5