TI-2025-13206 CVE-2025-14457 · GHSA-f37f-426r-r53h
Missing authorization in glenwpcoder Drag and Drop Multiple File Upload for Contact Form 7
Priority LOW 32
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ownership check in the dnd_codedropz_upload_delete() function in all vers…