CVE-2025-23921

Unrestricted Upload of File with Dangerous Type vulnerability in sh1zen Multi Uploader for Gravity Forms gf-multi-uploader allows Upload a Web Shell to a Web Server.This issue affects Multi Uploader for Gravity Forms: from n/a through = 1.1.3...

CVE-2025-23921

creationtimestamp| type| source ---|---|--- 2025-01-22 15:21:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo7z4oql2w 2025-01-22 15:49:18+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113872794928781988 2025-01-22 15:49:47+00:00| seen|...

CVE-2025-23921

The vulnerability CVE-2025-23921 affects the WordPress plugin Multi Uploader for Gravity Forms (notFound) and is described as Unrestricted Upload of File with Dangerous Type, enabling uploading a web shell to the web server. Public details indicate the issue affects versions from an unspecified s...