Skip to content
Glenwpcoder vulnerabilities
Newest
-
glenwpcoder drag and drop multiple file upload for contact form 7
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass
CVE-2026-18781
8.1 High
-
glenwpcoder drag and drop multiple file upload for contact form 7
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Admin+ Stored XSS via drag_n_drop_heading_tag Setting
CVE-2026-14325
3.5 Low
-
glenwpcoder drag and drop multiple file upload for woocommerce
Drag and Drop Multiple File Upload for WooCommerce < 1.1.8 - Unauthenticated File Deletion via Nonce Oracle
CVE-2026-16054
9.1 Critical
-
glenwpcoder drag and drop multiple file upload for contact form 7
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' Settings
CVE-2026-8991
4.4 Medium
-
glenwpcoder drag and drop multiple file upload for contact form 7
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass
CVE-2026-5718
Public exploit
8.1 High
-
glenwpcoder drag and drop multiple file upload for contact form 7
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field
CVE-2026-5710
7.5 High
-
glenwpcoder drag and drop multiple file upload for contact form 7
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.5 - Unauthenticated Arbitrary File Upload
CVE-2026-3459
8.1 High
-
codedropz contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion
CVE-2025-14457
3.7 Low
-
glenwpcoder drag and drop multiple file upload for contact form 7
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.2 - Unauthenticated Limited Arbitrary File Upload
CVE-2025-14842
6.1 Medium
-
glenwpcoder drag and drop multiple file upload for contact form 7
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie
CVE-2025-8464
5.3 Medium
-
glenwpcoder drag and drop multiple file upload for contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 more
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks
CVE-2025-3515
Public exploit
8.1 High
-
glenwpcoder drag and drop multiple file upload for woocommerce
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function
CVE-2025-4403
Public exploit
9.8 Critical
-
glenwpcoder drag and drop multiple file upload for woocommerce
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move
CVE-2025-2941
9.8 Critical
-
glenwpcoder drag and drop multiple file upload for contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 more
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion
CVE-2025-2485
Fix available
7.5 High
-
glenwpcoder drag and drop multiple file upload for contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 more
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File Deletion
CVE-2025-2328
8.8 High
-
codedropz drag and drop multiple file upload - contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.8.5 - Limited Arbitrary File Deletion
CVE-2024-12267
5.3 Medium
-
codedropz drag and drop multiple file upload - contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure
CVE-2024-3717
5.3 Medium
-
codedropz drag and drop multiple file upload for woocommerce
WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities
CVE-2022-45377
6.5 Medium
-
codedropz drag and drop multiple file upload - contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more
Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload
CVE-2023-5822
8.1 High
-
glenwpcoder drag and drop multiple file upload for woocommerce, codedropz drag and drop multiple file uploader +1 more
Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting
CVE-2023-4821
5.4 Medium