Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: pietror91 Clear all filters
TI-2026-12239 CVE-2026-14484 · GHSA-c3qc-jx9p-5c29

RapiSafe <= 1.0.4 - Unauthenticated Arbitrary File Deletion via 'rsmfcf7_session' and 'file_name' Parameters

Priority MEDIUM 48

The RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handleAjaxRemoveUpload function in all versions up…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01201 Published 2026-08-15 No fix listed CWE-22