CVE-2025-3515

CVE-2025-3515 - WordPress 파일 업로드 RCE 사용법 python3 exploit.py 개요 CVE-2025-3515 는 "Drag and Drop Multiple File Upload for Contact Form 7" WordPress 플러그인의 파일 업로드 취약점으로, 인증되지 않은 공격자가 악성 파일을 업로드하여 원격 코드 실행RCE을 달성할 수 있게 합니다. 플러그인 : drag-and-drop-multiple-file-upload-contact-form-7 영향받는 버전 : ≤ 1.3.8.9 발견...

CVE-2026-5364

CVE-2026-5364 CVE-2026-5364는 Contact Form 7용 드래그 앤 드롭 파일 업로드에서 발생하는 CVSS 8.1높음의 인증되지 않은 임의 파일 업로드 취약점입니다. CVE-2026-5364 — CF7 드래그 & 드롭 파일 업로드 RCE sanitizefilename 우회를 통한 인증되지 않은 임의 파일 업로드 CVSS 8.1높음 | 영향: = 1.1.3 | 패치: 1.1.4 📋 개요 필드| 값 ---|--- CVE ID| CVE-2026-5364 플러그인| Contact Form 7용 드래그 앤 드롭 ...

WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability

Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...

PT-2026-79299

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not escape one of its settings before using it as an HTML tag name in front-end output, allowing users with administrator access to inject arbitrary web scripts that execute on any front-end page...

EUVD-2012-4905

Malware in sbrugna...

EUVD-2024-31409

Malicious code in bioql PyPI...

CVE-2024-33697

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rimes Gold CF7 File Download – File Download for CF7 allows Stored XSS.This issue affects CF7 File Download – File Download for CF7: from n/a through 2.0...

CVE-2012-4981

Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability...

CVE-2024-33697: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rimes Gold CF7 File Download – File Download for CF7 allows Stored XSS.This issue affects CF7 File Download – File Download for CF7: from n/a through 2.0...

CVE-2012-4981

Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability...

CVE-2012-4981: Improper Neutralization of Special Elements used in an OS Command

Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability...

Toshiba ConfigFree CF7 File Remote Command Execution

/----------------------------------------------------------------------------- | Toshiba ConfigFree CF7 File Remote Command Execution | -----------------------------------------------------------------------------/ Summary ======= There is a command execution vulnerability in the Toshiba ConfigFr...