WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2020-09-21
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.5.5 - Unauthenticated Remote Code Execution
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2022-03-07
Title
Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2022-09-26
Title
Drag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2023-05-24
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.6.6 - File Upload and File deletion via CSRF
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2023-11-01
Title
Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.7.4 - Unauthenticated Arbitrary File Upload
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2024-04-29
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.7.8 - Sensitive Information Exposure
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2025-01-30
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.8.6 - Limited Arbitrary File Deletion
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2025-03-27
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.8.8 - Unauthenticated Arbitrary File Deletion
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2025-03-27
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.8.9 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2025-06-16
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.0 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2025-08-15
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.1 - Directory Traversal
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2026-01-06
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.9.3 - Unauthenticated Limited Arbitrary File Upload
Slug
drag-and-drop-multiple-file-upload-contact-form-7
Published
2026-01-14
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.3 - Missing Authorization to Unauthenticated File Deletion
Slug
drag-and-drop-multiple-file-upload-for-woocommerce
Published
2023-09-21
Title
Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting
Slug
drag-and-drop-multiple-file-upload-for-woocommerce
Published
2025-04-04
Title
Drag and Drop Multiple File Upload for WooCommerce < 1.1.5 - Unauthenticated Arbitrary File Move
Slug
drag-and-drop-multiple-file-upload-for-woocommerce
Published
2025-05-08
Title
Drag and Drop Multiple File Upload for WooCommerce < 1.1.7 - Unauthenticated Arbitrary File Upload via upload Function
Slug
drag-drop-file-uploader
Published
2014-08-01
Title
drag & drop file upload 0.1 - Arbitrary File Upload
Slug
drag-n-drop-upload-cf7-pro
Published
2023-03-21
Title
Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard < 2.11.1 - Reflected Cross-Site Scripting
Slug
drag-n-drop-upload-cf7-pro
Published
2023-03-21
Title
Drag and Drop Multiple File Upload PRO - Contact Form 7 with Remote Storage Integrations < 5.0.6.4 - Reflected Cross-Site Scripting
Slug
drag-n-drop-upload-cf7-pro
Published
2023-03-08
Title
Drag and Drop Multiple File Upload PRO - Contact Form 7 with Remote Storage Integrations < 5.0.6.3 - Path Traversal
Slug
drag-n-drop-upload-cf7-pro
Published
2023-03-08
Title
Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard < 2.11.0 - Path Traversal
Slug
dragfy-addons-for-elementor
Published
2023-11-07
Title
Dragfy Addons for Elementor <= 1.0.2 - Missing Authorization via save_settings
Slug
dragon-calendar-free-version
Published
2025-03-31
Title
Multi Days Events and Multi Events in One Day Calendar <= 1.1.3 - Cross-Site Request Forgery
Slug
draw-attention
Published
2023-05-30
Title
Draw Attention < 2.0.12 - Subscriber+ Unauthorized Featured Image Modification
Slug
draw-attention
Published
2023-10-24
Title
Draw Attention < 2.0.16 - Improper Access Control via register_cpt