Veille CVE

Recherche « Unknown Drag and Drop Multiple File Upload for Contact Form 7 »

2 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Drag and Drop Multiple File Upload for Contact Form 7 » ✕
  1. CVE-2026-18781 8.1 Élevée

    Unknown Drag and Drop Multiple File Upload for Contact Form 7

    The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server.

  2. CVE-2026-14325 3.5 Faible

    Unknown Drag and Drop Multiple File Upload for Contact Form 7

    The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not escape one of its settings before using it as an HTML tag name in front-end output, allowing users with administrator access to inject arbitrary web scripts that execute on any front-end page rendering its upload field.