Skip to content
OpenAdvisories

Vendor

glenwpcoder

15 known vulnerabilities.

Products

Drag and Drop Multiple File Upload for Contact Form 7 13 Drag and Drop Multiple File Upload for WooCommerce 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-4403 Public exploit

    Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function

    The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.1.6 due to accepting a user‐supplied supported_type string and the uploaded filename without enforcing …

    glenwpcoder Drag and Drop Multiple File Upload for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2025-2941

    Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move

    The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation via the wc-upload-file[] parameter in all versions up to, and including, 1.1.4. This makes it possible …

    glenwpcoder Drag and Drop Multiple File Upload for WooCommerce Web / CMS