CVE-2026-40769

HIGH

WordPress Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field plugin <= 1.0.6 - Arbitrary File Deletion vulnerability

Title source: cna
STIX 2.1

Description

Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi &#8211; Save Entries, File Upload &amp; Country Code Field <= 1.0.6 versions.

References (1)

Core 1

Scores

CVSS v3 8.6
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Details

CWE
CWE-22
Status published
Products (1)
Satinder Singh/Contact Form Extender for Divi &#8211; Save Entries, File Upload &amp; Country Code Field < 1.0.6
Published Jun 15, 2026
Tracked Since Jun 16, 2026