Themefic Vulnerabilities and Affected Products
Vulnerabilities associated with Ultra Addons for WPForms.
Products
Clear product- Tourfic10 vulnerabilities
- Hydra Booking9 vulnerabilities
- Ultimate Addons for Contact Form 78 vulnerabilities
- Ultra Addons for Contact Form 75 vulnerabilities
- Hydra Booking — Appointment Scheduling & Booking Calendar3 vulnerabilities
- Instantio3 vulnerabilities
- Tourfic – Travel Booking, Hotel Booking & Car Rental WordPress Plugin3 vulnerabilities
- Travelfic Toolkit3 vulnerabilities
- BEAF2 vulnerabilities
- Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings1 vulnerability
- Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin1 vulnerability
- Ultra Addons for WPForms1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-39594MEDIUM | WordPress Ultra Addons for WPForms plugin <= 1.0.11 - Broken Access Control vulnerabilitySubscriber Broken Access Control in Ultra Addons for WPForms <= 1.0.11 versions. CWE-862Jun 15, 2026 | CVSS6.4v3.1 | EPSS0.287% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |