Borisolhor vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Borisolhor products: 1 record(s), with severity, exploitation and fixes.

Drop Uploader for CF7 - Drag&Drop File Uploader Addon 1

Exploited only (KEV) →

CVE-2025-53283 Critical · 10.0 CWE-434 Nov 6, 2025

WordPress Drop Uploader for CF7 - Drag&Drop File Uploader Addon Plugin <= 2.4.1 - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader for CF7 - Drag&Drop File Uploader Addon drop-uploader-for-contact-form-7-dragdrop-file-uploader-addon allows Upload a Web Shell to a Web Server.This issue affects Drop Uploader for CF7 - Drag&Drop File Uploader Addon: from n/a through <= 2.4.1.