Exploit for Unrestricted Upload of File with Dangerous Type in Codedropz Drag_And_Drop_Multiple_File_Upload_-_Contact_Form_7

CVE-2025-3515 WordPress Lab Drag and Drop Multiple File Uploa...

CVE-2025-3515

creationtimestamp| type| source ---|---|--- 2025-06-17 09:41:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18573 2025-06-17 10:01:14+00:00| published-proof-of-concept| Telegram/ONimq940-aml-ziaQNnPitR2a4dvARau7ekaKGXqYn5E4A 2025-06-17 11:03:08+00:00| seen|...

CVE-2025-3515

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin is vulnerable to arbitrary file upload in all versions up to and including 1.3.8.9 . The root cause is insufficient file type validation within the dnd_upload_cf7_upload() function (located in /inc/dnd-upload-cf7.php), whe...

CVE-2025-3515 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.3.8.9. This makes it possible for unauthenticated attackers to bypass the plugin's blacklist and...

CVE-2025-3515 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.3.8.9. This makes it possible for unauthenticated attackers to bypass the plugin's blacklist and...

WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks vulnerability

Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks vulnerability discovered by mikemyers in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions = 1.3.8.9...