satindersingh vulnerabilities

Products

• Contact Form Extender for Divi – Submissions DB & Extra Fields 1

Latest satindersingh CVEs

Newest publication first

1. CVE-2026-120559 Contact Form Extender for Divi Builder <= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path Traversal

   Published 2026-11-03

   High·CVSS 7.5 EPSS 0.67%

   The Contact Form Extender for Divi Builder plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient file path validation in the cfefd_remove_uploaded_file() function in all versions up to, and including, 1.0.6. This makes it possible for unauthenticated a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.