Topic

File Upload

4 reports tagged File Upload, spanning vulnerability coverage.

Vulnerability
Drag and Drop Multiple File Upload for Contact Form 7 Code Injection (CVE-2026-18781)

CVE-2026-18781 is a CVSS 8.1 code injection in a Contact Form 7 WordPress add-on, reported exploited by VulnCheck alone.

contact-form-7wordpresscode-injection +3

2026-09-20
Vulnerability
Gravity Forms Vulnerability (CVE-2026-84434)

CVE-2026-84434 is an unauthenticated arbitrary file upload flaw in the Gravity Forms WordPress plugin, per VulnCheck alone.

gravity-formswordpressfile-upload +2

2026-09-20
Vulnerability
Gift Cards For WooCommerce Pro Vulnerability (CVE-2026-15039)

CVE-2026-15039 is a CVSS 9.8 unrestricted file upload flaw in a WooCommerce gift-card plugin allowing unauthenticated RCE, reported exploited by VulnCheck.

wp-swingswordpresswoocommerce +4

2026-09-20
Vulnerability
WP Cookie Notice Vulnerability (CVE-2026-82970)

CVE-2026-82970 is a CVSS 10.0 unrestricted file upload flaw in the WP Cookie Notice WordPress plugin through 4.4.1, reported as exploited by VulnCheck KEV.

wp-legal-pageswordpressfile-upload +3

2026-09-17