Sh1zen
3 CVEs across 2 Sh1zen products. Browse Sh1zen vulnerabilities, severities, and proof-of-concept exploits.
Sh1zen products with known CVEs
Sh1zen CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-5581 | Critical | 9.1 | 2026-08-05 | The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to unauthorized arbitrary media deletion in all versions up to, and including, 1.1.8. T… |
CVE-2025-14344 | Critical | 9.8 | 2025-12-12 | The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'plupload_aj… |
CVE-2025-53314 | Critical | 9.6 | 2025-06-27 | Cross-Site Request Forgery (CSRF) vulnerability in sh1zen WP Optimizer wp-optimizer allows SQL Injection.This issue affects WP Optimizer: from n/a through <= 2… |
CVE-2025-23921 | Critical | 9.0 | 2025-01-22 | Unrestricted Upload of File with Dangerous Type vulnerability in sh1zen Multi Uploader for Gravity Forms gf-multi-uploader allows Upload a Web Shell to a Web S… |