CVE Browser

CVE-2026-8991 MEDIUM

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_…

CVSS 4.4 EPSS 0.34% Jun 6, 2026
CVE-2026-5718 HIGH

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass

CVSS 8.1 EPSS 3.46% Apr 17, 2026
CVE-2026-5710 HIGH

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field

CVSS 7.5 EPSS 0.59% Apr 17, 2026
CVE-2026-3459 HIGH

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.5 - Unauthenticated Arbitrary File Upload

CVSS 8.1 EPSS 0.95% Mar 5, 2026
CVE-2025-14457 HIGH

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion

CVSS 7.4 EPSS 0.22% Jan 15, 2026
CVE-2025-14842 MEDIUM

Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.2 - Unauthenticated Limited Arbitrary File Upload

CVSS 6.1 EPSS 0.37% Jan 7, 2026
CVE-2025-8464 MEDIUM

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie

CVSS 5.3 EPSS 0.71% Aug 16, 2025
CVE-2025-3515 CRITICAL

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks

CVSS 9.8 EPSS 5.82% Jun 17, 2025
CVE-2025-4403 CRITICAL

Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function

CVSS 9.8 EPSS 2.28% May 9, 2025
CVE-2025-2941 CRITICAL

Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move

CVSS 9.8 EPSS 1.74% Apr 5, 2025
CVE-2025-2485 HIGH

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion

CVSS 8.8 EPSS 0.59% Mar 28, 2025
CVE-2025-2328 HIGH

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File Deletion

CVSS 8.8 EPSS 1.09% Mar 28, 2025
CVE-2024-12267 CRITICAL

Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.8.5 - Limited Arbitrary File Deletion

CVSS 9.1 EPSS 0.33% Jan 31, 2025
CVE-2024-3717 HIGH

Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure

CVSS 7.5 EPSS 0.71% May 2, 2024
CVE-2023-5822 CRITICAL

Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload

CVSS 9.8 EPSS 1.79% Nov 22, 2023

Showing 1 to 15 CVEs · page 1