glenwpcoder vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20257
4. 20266

Newest CVEs

• CVE-2026-8991

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' Settings

  glenwpcoder · Drag and Drop Multiple File Upload for Contact Form 7

  Medium4.4
• CVE-2026-5718

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass

  glenwpcoder · Drag and Drop Multiple File Upload for Contact Form 7

  High8.1
• CVE-2026-5710

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field

  glenwpcoder · Drag and Drop Multiple File Upload for Contact Form 7

  High7.5
• CVE-2026-3459

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.5 - Unauthenticated Arbitrary File Upload

  glenwpcoder · Drag and Drop Multiple File Upload for Contact Form 7

  High8.1
• CVE-2025-14457

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion

  glenwpcoder · Drag and Drop Multiple File Upload for Contact Form 7

  Low3.7
• CVE-2025-14842

  Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.2 - Unauthenticated Limited Arbitrary File Upload

  glenwpcoder · Drag and Drop Multiple File Upload for Contact Form 7

  Medium6.1
• CVE-2025-8464

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie

  glenwpcoder · Drag and Drop Multiple File Upload for Contact Form 7

  Medium5.3
• CVE-2025-3515

  Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks

  glenwpcoder · Drag and Drop Multiple File Upload for Contact Form 7

  High8.1
• CVE-2025-4403

  Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function

  glenwpcoder · Drag and Drop Multiple File Upload for WooCommerce

  Critical9.8
• CVE-2025-2941

  Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move

  glenwpcoder · Drag and Drop Multiple File Upload for WooCommerce

  Critical9.8