Log in Start free

glenwpcoder

Products

ProductCVEsExploitedLatest
Drag and Drop Multiple File Upload for Contact Form 713–Jun 6, 2026
Drag and Drop Multiple File Upload for WooCommerce2–May 9, 2025

Exploited and recent CVEs

  • CVE-2026-8991 Medium 4.4 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' Settings 0.3%
  • CVE-2026-5718 High 8.1 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass 4.2%
  • CVE-2026-5710 High 7.5 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field 0.7%
  • CVE-2026-3459 High 8.1 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.5 - Unauthenticated Arbitrary File Upload 0.6%
  • CVE-2025-14457 Low 3.7 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion 0.2%
  • CVE-2025-14842 Medium 6.1 Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.2 - Unauthenticated Limited Arbitrary File Upload 0.4%
  • CVE-2025-8464 Medium 5.3 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie 0.7%
  • CVE-2025-3515 High 8.1 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks 6.0%
  • CVE-2025-4403 Critical 9.8 Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function 2.3%
  • CVE-2025-2941 Critical 9.8 Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move 1.7%
  • CVE-2025-2485 High 7.5 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion 0.6%
  • CVE-2025-2328 High 8.8 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File Deletion 1.1%
  • CVE-2024-12267 Medium 5.3 Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.8.5 - Limited Arbitrary File Deletion 0.3%
  • CVE-2024-3717 Medium 5.3 Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure 0.7%
  • CVE-2023-5822 High 8.1 Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload 2.2%