Advisories · Technology
sh1zen Multi Uploader for Gravity Forms.
Every CVE that names sh1zen Multi Uploader for Gravity Forms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload
- sh1zen Multi Uploader for Gravity Forms
- Unrestricted file upload
- CVSS 9.1 CriticalCritical · CVSS 9+
Multi Uploader for Gravity Forms <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Media Deletion
- sh1zen Multi Uploader for Gravity Forms
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Multi Uploader for Gravity Forms <= 1.1.7 - Unauthenticated Arbitrary File Deletion
- sh1zen Multi Uploader for Gravity Forms
- Path traversal
- CVSS 9.0 CriticalCritical · CVSS 9+
WordPress Multi Uploader for Gravity Forms plugin <= 1.1.3 - Arbitrary File Upload vulnerability
- sh1zen Multi Uploader for Gravity Forms
- Unrestricted file upload