Skip to content

Codedropz vulnerabilities

Products

Newest

codedropz contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion CVE-2025-14457 3.7 LowJanuary 15, 2026
codedropz drag and drop multiple file upload (pro) - woocommerce Drag and Drop Multiple File Upload (Pro) - WooCommerce <= 1.7.1 and 5.0 - 5.0.5 - Unauthenticated Arbitrary File Upload CVE-2025-5746 9.8 CriticalJuly 2, 2025
codedropz drag and drop multiple file upload (pro) - woocommerce WordPress Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin <= 5.0.6 - Arbitrary File Upload Vulnerability CVE-2025-49885 10.0 CriticalJune 27, 2025
glenwpcoder drag and drop multiple file upload for contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 more Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks CVE-2025-3515 Public exploit 8.1 HighJune 17, 2025
glenwpcoder drag and drop multiple file upload for contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 more Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion CVE-2025-2485 Fix available 7.5 HighMarch 28, 2025
glenwpcoder drag and drop multiple file upload for contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 more Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File Deletion CVE-2025-2328 8.8 HighMarch 28, 2025
codedropz drag and drop multiple file upload - contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.8.5 - Limited Arbitrary File Deletion CVE-2024-12267 5.3 MediumJanuary 31, 2025
codedropz drag and drop multiple file upload - contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure CVE-2024-3717 5.3 MediumMay 2, 2024
codedropz drag and drop multiple file upload for woocommerce WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities CVE-2022-45377 6.5 MediumDecember 21, 2023
codedropz drag and drop multiple file upload - contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload CVE-2023-5822 8.1 HighNovember 22, 2023
glenwpcoder drag and drop multiple file upload for woocommerce, codedropz drag and drop multiple file uploader +1 more Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting CVE-2023-4821 5.4 MediumOctober 16, 2023
glen don l. mongaya drag and drop multiple file upload – contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 more WordPress Drag and Drop Multiple File Upload – Contact Form 7 Plugin <= 1.3.6.5 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-45364 5.4 MediumMay 24, 2023
unknown drag and drop multiple file upload pro - contact form 7 standard, drag and drop multiple file upload pro - contact form 7 with remote storage integrations, codedropz drag and drop multiple file upload - contact form 7 +2 more Drag and Drop Multiple File Upload PRO - Reflected Cross-Site Scripting CVE-2023-1282 6.1 MediumApril 17, 2023
codedropz drag and drop multiple file upload - contact form 7 Drag and Drop Multiple File Upload Contact Form 7 admin-ajax.php path traversal CVE-2023-1112 Public exploit 4.7 MediumMarch 1, 2023
codedropz drag and drop multiple file upload - contact form 7, unknown drag and drop multiple file upload – contact form 7 +1 more Drag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass CVE-2022-3282 4.3 MediumOctober 17, 2022
codedropz drag and drop multiple file upload - contact form 7, unknown drag and drop multiple file upload – contact form 7 +1 more Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS CVE-2022-0595 EPSS 13.6% 5.4 MediumMarch 28, 2022
codedropz drag and drop multiple file upload - contact form 7 The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows... CVE-2020-12800 Public exploit EPSS 78.6% 9.8 CriticalJune 8, 2020