Drag and Drop Multiple File Upload for Contact Form 7

Уязвимости

• CVE-2025-3515без авторизации≤ 1.3.8.9

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks

  Критич. 9.8

• CVE-2023-5822без авторизации≤ 1.3.7.3

  Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload

  Критич. 9.8

• CVE-2020-12800без авторизации

  The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code ex

  Критич. 9.8

• CVE-2024-12267без авторизации≤ 1.3.8.5

  Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.8.5 - Limited Arbitrary File Deletion

  Критич. 9.1

• CVE-2025-2485без авторизации · нужен клик≤ 1.3.8.8

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion

  Высокий 8.8

• CVE-2025-2328без авторизации · нужен клик≤ 1.3.8.7

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File Deletion

  Высокий 8.8

• CVE-2022-45364без авторизации · нужен клик≤ 1.3.6.5

  WordPress Drag and Drop Multiple File Upload – Contact Form 7 Plugin <= 1.3.6.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2026-18781без авторизации→ 1.3.9.9

  Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass

  Высокий 8.1

• CVE-2026-5718без авторизации≤ 1.3.9.7

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass

  Высокий 8.1

• CVE-2026-3459без авторизации≤ 1.3.9.5

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.5 - Unauthenticated Arbitrary File Upload

  Высокий 8.1

• CVE-2026-5710без авторизации≤ 1.3.9.6

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field

  Высокий 7.5

• CVE-2024-3717без авторизации≤ 1.3.7.7

  Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure

  Высокий 7.5

• CVE-2025-14457без авторизации≤ 1.3.9.2

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion

  Высокий 7.4

• CVE-2026-49055без авторизации · нужен клик≤ 1.3.9.7

  WordPress Drag and Drop Multiple File Upload – Contact Form 7 plugin <= 1.3.9.7 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2025-14842без авторизации · нужен клик≤ 1.3.9.2

  Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.2 - Unauthenticated Limited Arbitrary File Upload

  Средний 6.1

• CVE-2022-0595без авторизации · нужен клик→ 1.3.6.3

  Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS

  Средний 5.4

• CVE-2025-8464без авторизации≤ 1.3.9.0

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie

  Средний 5.3

• CVE-2026-8991админ≤ 1.3.9.7

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n

  Средний 4.4

• CVE-2022-3282нужен вход→ 1.3.6.5

  Drag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass

  Средний 4.3

• CVE-2026-14325админ→ 1.3.9.9

  Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Admin+ Stored XSS via drag_n_drop_heading_tag Setting

  Низкий 3.5