{"items":[{"id":"CVE-2026-8991","published":"2026-06-06T02:28:33.270Z","updated":"2026-06-06T11:44:26.256Z","title":"Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' Settings","severity":"MEDIUM","score":4.4,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2026-5718","published":"2026-04-17T17:25:55.466Z","updated":"2026-05-27T00:26:11.453Z","title":"Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass","severity":"HIGH","score":8.1,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.04175,"kevAdded":null},{"id":"CVE-2026-5710","published":"2026-04-17T17:25:54.940Z","updated":"2026-04-17T17:50:00.362Z","title":"Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field","severity":"HIGH","score":7.5,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.0069,"kevAdded":null},{"id":"CVE-2026-3459","published":"2026-03-05T18:25:45.925Z","updated":"2026-04-08T16:45:14.638Z","title":"Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.5 - Unauthenticated Arbitrary File Upload","severity":"HIGH","score":8.1,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.00648,"kevAdded":null},{"id":"CVE-2025-14457","published":"2026-01-15T06:45:04.078Z","updated":"2026-04-08T16:37:59.291Z","title":"Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion","severity":"LOW","score":3.7,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2025-14842","published":"2026-01-07T06:36:03.858Z","updated":"2026-04-08T17:21:26.486Z","title":"Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.2 - Unauthenticated Limited Arbitrary File Upload","severity":"MEDIUM","score":6.1,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2025-8464","published":"2025-08-16T07:25:28.619Z","updated":"2026-04-08T16:37:33.117Z","title":"Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie","severity":"MEDIUM","score":5.3,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.00733,"kevAdded":null},{"id":"CVE-2025-3515","published":"2025-06-17T09:21:39.083Z","updated":"2026-04-08T17:28:55.327Z","title":"Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks","severity":"HIGH","score":8.1,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.06026,"kevAdded":null},{"id":"CVE-2025-4403","published":"2025-05-09T08:24:05.915Z","updated":"2026-04-08T17:09:37.336Z","title":"Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function","severity":"CRITICAL","score":9.8,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for WooCommerce","kev":false,"epss":0.02279,"kevAdded":null},{"id":"CVE-2025-2941","published":"2025-04-05T07:01:10.502Z","updated":"2026-04-08T16:42:44.695Z","title":"Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move","severity":"CRITICAL","score":9.8,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for WooCommerce","kev":false,"epss":0.01738,"kevAdded":null},{"id":"CVE-2025-2485","published":"2025-03-28T06:51:46.034Z","updated":"2026-04-08T17:02:16.447Z","title":"Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion","severity":"HIGH","score":7.5,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.00588,"kevAdded":null},{"id":"CVE-2025-2328","published":"2025-03-28T06:51:45.382Z","updated":"2026-04-08T16:35:42.121Z","title":"Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File Deletion","severity":"HIGH","score":8.8,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.01094,"kevAdded":null},{"id":"CVE-2024-12267","published":"2025-01-31T11:11:09.235Z","updated":"2026-04-08T16:32:25.165Z","title":"Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.8.5 - Limited Arbitrary File Deletion","severity":"MEDIUM","score":5.3,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.00327,"kevAdded":null},{"id":"CVE-2024-3717","published":"2024-05-02T16:51:48.303Z","updated":"2026-04-08T16:36:55.729Z","title":"Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure","severity":"MEDIUM","score":5.3,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.00713,"kevAdded":null},{"id":"CVE-2023-5822","published":"2023-11-22T15:33:21.106Z","updated":"2026-04-08T16:38:13.611Z","title":"Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload","severity":"HIGH","score":8.1,"vendor":"glenwpcoder","product":"Drag and Drop Multiple File Upload for Contact Form 7","kev":false,"epss":0.02153,"kevAdded":null}]}