Skip to content
OpenAdvisories

Vendor

glenwpcoder

15 known vulnerabilities.

Products

Drag and Drop Multiple File Upload for Contact Form 7 13 Drag and Drop Multiple File Upload for WooCommerce 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-5718 Public exploit

    Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass

    The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.3.9.7. This is due to insufficient file type validation that occurs when custom blacklist types are confi…

    glenwpcoder Drag and Drop Multiple File Upload for Contact Form 7 Web / CMS
  • High 8.1
    CVE-2025-3515 Public exploit

    Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks

    The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.3.8.9. This makes it possible for unauthenticated attackers…

    glenwpcoder Drag and Drop Multiple File Upload for Contact Form 7 Web / CMS
  • Critical 9.8
    CVE-2025-4403 Public exploit

    Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function

    The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.1.6 due to accepting a user‐supplied supported_type string and the uploaded filename without enforcing …

    glenwpcoder Drag and Drop Multiple File Upload for WooCommerce Web / CMS