Drag and Drop Multiple File Upload for Contact Form 7

Güvenlik açıkları

• CVE-2025-3515kimlik doğrulamasız≤ 1.3.8.9

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks

  Kritik 9.8

• CVE-2023-5822kimlik doğrulamasız≤ 1.3.7.3

  Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload

  Kritik 9.8

• CVE-2020-12800kimlik doğrulamasız

  The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code ex

  Kritik 9.8

• CVE-2024-12267kimlik doğrulamasız≤ 1.3.8.5

  Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.8.5 - Limited Arbitrary File Deletion

  Kritik 9.1

• CVE-2025-2485kimlik doğrulamasız · tıklama gerekir≤ 1.3.8.8

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion

  Yüksek 8.8

• CVE-2025-2328kimlik doğrulamasız · tıklama gerekir≤ 1.3.8.7

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File Deletion

  Yüksek 8.8

• CVE-2022-45364kimlik doğrulamasız · tıklama gerekir≤ 1.3.6.5

  WordPress Drag and Drop Multiple File Upload – Contact Form 7 Plugin <= 1.3.6.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2026-18781kimlik doğrulamasız→ 1.3.9.9

  Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass

  Yüksek 8.1

• CVE-2026-5718kimlik doğrulamasız≤ 1.3.9.7

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass

  Yüksek 8.1

• CVE-2026-3459kimlik doğrulamasız≤ 1.3.9.5

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.5 - Unauthenticated Arbitrary File Upload

  Yüksek 8.1

• CVE-2026-5710kimlik doğrulamasız≤ 1.3.9.6

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field

  Yüksek 7.5

• CVE-2024-3717kimlik doğrulamasız≤ 1.3.7.7

  Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure

  Yüksek 7.5

• CVE-2025-14457kimlik doğrulamasız≤ 1.3.9.2

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion

  Yüksek 7.4

• CVE-2026-49055kimlik doğrulamasız · tıklama gerekir≤ 1.3.9.7

  WordPress Drag and Drop Multiple File Upload – Contact Form 7 plugin <= 1.3.9.7 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-14842kimlik doğrulamasız · tıklama gerekir≤ 1.3.9.2

  Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.2 - Unauthenticated Limited Arbitrary File Upload

  Orta 6.1

• CVE-2022-0595kimlik doğrulamasız · tıklama gerekir→ 1.3.6.3

  Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS

  Orta 5.4

• CVE-2025-8464kimlik doğrulamasız≤ 1.3.9.0

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie

  Orta 5.3

• CVE-2026-8991yönetici≤ 1.3.9.7

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n

  Orta 4.4

• CVE-2022-3282giriş gerekir→ 1.3.6.5

  Drag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass

  Orta 4.3

• CVE-2026-14325yönetici→ 1.3.9.9

  Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Admin+ Stored XSS via drag_n_drop_heading_tag Setting

  Düşük 3.5