PatchTheCVEcodedropz vulnerabilities
Recent CVEs affecting codedropz products. 5 tracked.
codedropz has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-01-15. Highest priority: CVE-2025-3515 (score 57/100).
- CVE-2025-3515 HIGH 8.1 UPGRADE The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file
- CVE-2025-2485 HIGH 7.5 UPGRADE The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Inj
- CVE-2025-2328 HIGH 8.8 UPGRADE The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file
- CVE-2025-14457 LOW 3.7 UPGRADE The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to unauthorized m
- CVE-2024-12267 MEDIUM 5.3 UPGRADE The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to limited arbitrar
FAQ
How do I fix codedropz vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is codedropz being exploited right now?
None of the tracked codedropz CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which codedropz CVE should I patch first?
CVE-2025-3515 currently ranks highest (57/100): The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file.