Sh1zen

6 CVEs across 3 Sh1zen products. Browse Sh1zen vulnerabilities, severities, and proof-of-concept exploits.

Sh1zen products with known CVEs

ProductCVEs
Multi Uploader For Gravity Forms4
Wp Optimizer1
Wp Optimizer – Pagespeed, Cache, Minify & Core Web Vitals1
Sh1zen CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-6295Medium4.92026-09-19The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and including 2.5.0. This is due to an unsafe…
CVE-2026-87796Critical9.82026-09-17The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the move_file…
CVE-2026-5581Critical9.12026-08-05The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to unauthorized arbitrary media deletion in all versions up to, and including, 1.1.8. T…
CVE-2025-14344Critical9.82025-12-12The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'plupload_aj…
CVE-2025-53314Critical9.62025-06-27Cross-Site Request Forgery (CSRF) vulnerability in sh1zen WP Optimizer wp-optimizer allows SQL Injection.This issue affects WP Optimizer: from n/a through <= 2…
CVE-2025-23921Critical9.02025-01-22Unrestricted Upload of File with Dangerous Type vulnerability in sh1zen Multi Uploader for Gravity Forms gf-multi-uploader allows Upload a Web Shell to a Web S…