Codedropz Contact Form 7 vulnerabilities

• codedropz contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion CVE-2025-14457 3.7 LowJanuary 15, 2026
• glenwpcoder drag and drop multiple file upload for contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 more Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks CVE-2025-3515 Public exploit 8.1 HighJune 17, 2025
• glenwpcoder drag and drop multiple file upload for contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 more Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion CVE-2025-2485 Fix available 7.5 HighMarch 28, 2025
• glenwpcoder drag and drop multiple file upload for contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 more Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File Deletion CVE-2025-2328 8.8 HighMarch 28, 2025
• codedropz drag and drop multiple file upload - contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.8.5 - Limited Arbitrary File Deletion CVE-2024-12267 5.3 MediumJanuary 31, 2025
• codedropz drag and drop multiple file upload - contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure CVE-2024-3717 5.3 MediumMay 2, 2024
• codedropz drag and drop multiple file upload - contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload CVE-2023-5822 8.1 HighNovember 22, 2023
• glen don l. mongaya drag and drop multiple file upload – contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 more WordPress Drag and Drop Multiple File Upload – Contact Form 7 Plugin <= 1.3.6.5 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-45364 5.4 MediumMay 24, 2023
• unknown drag and drop multiple file upload pro - contact form 7 standard, drag and drop multiple file upload pro - contact form 7 with remote storage integrations, codedropz drag and drop multiple file upload - contact form 7 +2 more Drag and Drop Multiple File Upload PRO - Reflected Cross-Site Scripting CVE-2023-1282 6.1 MediumApril 17, 2023
• codedropz drag and drop multiple file upload - contact form 7 Drag and Drop Multiple File Upload Contact Form 7 admin-ajax.php path traversal CVE-2023-1112 Public exploit 4.7 MediumMarch 1, 2023
• codedropz drag and drop multiple file upload - contact form 7, unknown drag and drop multiple file upload – contact form 7 +1 more Drag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass CVE-2022-3282 4.3 MediumOctober 17, 2022
• codedropz drag and drop multiple file upload - contact form 7, unknown drag and drop multiple file upload – contact form 7 +1 more Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS CVE-2022-0595 EPSS 13.6% 5.4 MediumMarch 28, 2022
• codedropz drag and drop multiple file upload - contact form 7 The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows... CVE-2020-12800 Public exploit EPSS 78.6% 9.8 CriticalJune 8, 2020