{"id":"CVE-2026-104246","revision":"817a720f33b34295af1098d6ce3d88c2","records":[{"revision":"817a720f33b34295af1098d6ce3d88c2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-104246","aliases":[],"title":"Contact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email Attachments","description":"The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature field value before building an email attachment path from it, allowing unauthenticated users to attach arbitrary files (bounded to wp-content on current Contact Form 7) to a form's outgoing email via path traversal; when a form is configured to email a copy to a submitter-controlled address, the attacker can read the targeted file.","state":0,"publishedAt":"2026-10-17T06:00:12.551+00:00","modifiedAt":"2026-10-18T11:12:33.183+00:00","affected":[{"ecosystem":"Vendor product","name":"Contact Form 7 Signature Addon","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Unknown\",\n                    \"product\": \"Contact Form 7 Signature Addon\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"version\": \"0\",\n                            \"lessThanOrEqual\": \"4.2.2\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"}],"metrics":[],"references":["https://wpscan.com/vulnerability/e56dc60b-9232-43f2-8d57-fe9452c85281/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-104246","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-104246","identifiers":["CVE-2026-104246"]},"retained":false,"historicalAffected":[]}],"coverage":[]}