6816 matches found
CVE-2025-8464
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464
CVE-2025-8464 affects the WordPress plugin Drag and Drop Multiple File Upload for Contact Form 7, vulnerable to Directory Traversal through the wpcf7_guest_user_id cookie in all versions up to 1.3.9.0. This could allow unauthenticated attackers to upload and delete files outside the intended dire...
PT-2025-33542 · WordPress · Drag/Drop Multiple File Upload – Contact Form 7
Name of the Vulnerable Software and Affected Versions: Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress versions through 1.3.9.0 Description: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal via the wpcf7...
Malicious code in decoherence-astroinformatics-subduction-dotenv-safe (npm)
The package decoherence-astroinformatics-subduction-dotenv-safe was found to contain malicious code...
Malicious code in nightwatch-andromeda-dotenv-safe-figures (npm)
The package nightwatch-andromeda-dotenv-safe-figures was found to contain malicious code...
Malicious code in safe-chain-test (npm)
The package safe-chain-test was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in dotenv-safe-mira-polaris-passport (npm)
The package dotenv-safe-mira-polaris-passport was found to contain malicious code...
Malicious code in ethology-bootes-dotenv-safe-xerxes (npm)
The package ethology-bootes-dotenv-safe-xerxes was found to contain malicious code...
Malicious code in n-safe-logger (npm)
The package n-safe-logger was found to contain malicious code...
Malicious code in angular2-safe-provider (npm)
The package angular2-safe-provider was found to contain malicious code...
Malicious code in dotenv-safe-firebase-uninstall-innercore (npm)
The package dotenv-safe-firebase-uninstall-innercore was found to contain malicious code...
Malicious code in neptune-markdown-pdf-ora-dotenv-safe (npm)
The package neptune-markdown-pdf-ora-dotenv-safe was found to contain malicious code...
MAL-2025-13955 Malicious code in ablation-dotenv-safe-coronalmassejection-non-blocking (npm)
The package ablation-dotenv-safe-coronalmassejection-non-blocking was found to contain malicious code...
MAL-2025-17293 Malicious code in colors-lacerta-dotenv-safe-xenon (npm)
The package colors-lacerta-dotenv-safe-xenon was found to contain malicious code...
Malicious code in iota-biohacking-dotenv-safe-delphinus (npm)
The package iota-biohacking-dotenv-safe-delphinus was found to contain malicious code...
Malicious code in firebase-babel-apollo-dotenv-safe (npm)
The package firebase-babel-apollo-dotenv-safe was found to contain malicious code...