Vulnerabilities in sh1zen
6 resultsCVE-2026-87796CRITICALMulti Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File UploadEPSS 1.1%CVE-2026-5581CRITICALMulti Uploader for Gravity Forms <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Media DeletionEPSS 0.7%CVE-2025-23921CRITICALWordPress Multi Uploader for Gravity Forms plugin <= 1.1.3 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-14344CRITICALMulti Uploader for Gravity Forms <= 1.1.7 - Unauthenticated Arbitrary File DeletionEPSS 0.5%CVE-2026-6295MEDIUMWP Optimizer <= 2.5.0 - Authenticated (Administrator+) SQL Injection via 's' ParameterEPSS 0.5%CVE-2025-53314CRITICALWordPress WP Optimizer plugin <= 2.5.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%