CVE-2025-3515

CVE-2025-3515 - RCE por subida de archivos en WordPress Uso root@kitploit: python3 exploit.py Resumen CVE-2025-3515 es una vulnerabilidad de subida de archivos en el plugin de WordPress "Drag and Drop Multiple File Upload for Contact Form 7" que permite a atacantes no autenticados subir archivos...

CVE-2026-5364

CVE-2026-5364 CVE-2026-5364 es una vulnerabilidad de carga de archivos arbitraria no autenticada con CVSS 8.1 High en Drag and Drop File Upload for Contact Form 7 CVE-2026-5364 — CF7 Drag & Drop File Upload RCE Carga de archivos arbitraria no autenticada mediante bypass desanitizefilename CVSS 8....

WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability

Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...

EUVD-2012-4905

Malware in sbrugna...

EUVD-2024-31409

Malicious code in bioql PyPI...

CVE-2024-33697

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rimes Gold CF7 File Download – File Download for CF7 allows Stored XSS.This issue affects CF7 File Download – File Download for CF7: from n/a through 2.0...

CVE-2012-4981

Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability...

CVE-2012-4981

Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability...

Toshiba ConfigFree CF7 File Remote Command Execution

/----------------------------------------------------------------------------- | Toshiba ConfigFree CF7 File Remote Command Execution | -----------------------------------------------------------------------------/ Summary ======= There is a command execution vulnerability in the Toshiba ConfigFr...