What’s Vulnerable › Products

sh1zen Multi Uploader for Gravity Forms vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your sh1zen Multi Uploader for Gravity Forms version is affected

Latest sh1zen Multi Uploader for Gravity Forms vulnerabilities

• CVE-2026-87796 — Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload (CVSS 9.8)
• CVE-2026-5581 — Multi Uploader for Gravity Forms <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Media Deletion (CVSS 9.1)
• CVE-2025-14344 — Multi Uploader for Gravity Forms <= 1.1.7 - Unauthenticated Arbitrary File Deletion (CVSS 9.8)
• CVE-2025-23921 — WordPress Multi Uploader for Gravity Forms plugin <= 1.1.3 - Arbitrary File Upload vulnerability (CVSS 9.0)