Medium CVE-2026-8991 The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' Settings in all versions up to, and including, 1.3.9.7 due to insufficient input sanitization and...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-8991 – The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress i...

VERWANDTEARTIKEL

CVE-2026-20245

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

Claude Opus Found a Four-Year-Old Hole in Zcash’s Privacy Layer. Nobody Knows If Someone Already Used It.

CISA Warns of SolarWinds Serv-U Vulnerability Exploited in Attacks

Critical Hugging Face Transformers Vulnerability Enables Remote Code Execution Attacks

[High] CVE-2026-9851 – The Booking Package plugin for WordPress is vulnerable to Privilege Escalation v...