Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CodedropzDrag And Drop Multiple File Upload - Contact Form 7

4 matches found

CVE
CVE•added 2025/03/28 7:15 a.m.•47 views

CVE-2025-2328

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'dnd_remove_uploaded_files' function in all versions up to, and including, 1.3.8.7. This makes it possible for unauthenticated atta...

8.8CVSS9AI score0.00643EPSS
CVE
CVE•added 2025/03/28 7:15 a.m.•47 views

CVE-2025-2485

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.8.7 via deserialization of untrusted input from the 'dnd_upload_cf7_upload'function. This makes it possible for attackers to inject a PHP Ob...

8.8CVSS8AI score0.0061EPSS
CVE
CVE•added 2025/01/31 11:15 a.m.•41 views

CVE-2024-12267

The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to limited arbitrary file deletion due to insufficient file path validation in the dnd_codedropz_upload_delete() function in all versions up to, and including, 1.3.8.5. This makes it possible for unauthentica...

9.1CVSS7.1AI score0.00114EPSS
CVE
CVE•added 2025/06/17 10:15 a.m.•40 views

CVE-2025-3515

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.3.8.9. This makes it possible for unauthenticated attackers to bypass the plugin's blacklist and up...

9.8CVSS8.6AI score0.00115EPSS