Drag And Drop Multiple File Upload Contact Form 7
Approved changes feed: RSS · Atom
cpe:2.3:a:codedropz:drag_and_drop_multiple_file_upload_-_contact_form_7:*:*:*:*:pro:wordpress:*:*
part: a version: * update: *
| Vendor | Codedropz (3c7ace3c-d05e-59b0-b7b8-8c5709242d0d) |
|---|---|
| Product | Drag And Drop Multiple File Upload Contact Form 7 (55101642-6eac-58d8-a9e4-ae2a05862a8d) |
| Edition | * |
| Language | * |
| Software edition | pro |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-1282 |
vulnerable | 2026-06-08 05:52:34.326731 |
Drag and Drop Multiple File Upload PRO - Reflected Cross-Site Scripting
The Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard WordPress plugin before 2.11.1 and Drag and Drop Multiple File Upload PRO - Contact Form 7 with Remote Storage Integrations WordPress plugin before 5.0.6.4 do not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admins.
Published: 2023-04-17T12:17:42.385Z
Updated: 2025-02-06T15:28:52.381Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1112 |
vulnerable | 2026-06-08 05:52:33.908314 |
Drag and Drop Multiple File Upload Contact Form 7 admin-ajax.php path traversal
MEDIUM (4.7)
A vulnerability was found in Drag and Drop Multiple File Upload Contact Form 7 5.0.6.1 on WordPress. It has been classified as critical. Affected is an unknown function of the file admin-ajax.php. The manipulation of the argument upload_name leads to relative path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222072.
Published: 2023-03-01T09:54:38.579Z
Updated: 2025-03-05T19:25:22.912Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.