CVE-2025-53283: WordPress Drop Uploader for CF7 - Drag&Drop File Uploader Addon Plugin <= 2.4.1 - Arbitrary File Upload Vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader for CF7 - Drag&Drop File Uploader Addon drop-uploader-for-contact-form-7-dragdrop-file-uploader-addon allows Upload a Web Shell to a Web Server.This issue affects Drop Uploader for CF7 - Drag&Drop File Uploader Addon: from n/a through <= 2.4.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53283?
CVE-2025-53283 is classified as a high severity vulnerability due to its potential for allowing unauthorized file uploads to a web server.
How do I fix CVE-2025-53283?
To fix CVE-2025-53283, upgrade the Drop Uploader for CF7 - Drag&Drop File Uploader Addon to version 2.4.2 or later.
What type of vulnerability is CVE-2025-53283?
CVE-2025-53283 is an Unrestricted Upload of File with Dangerous Type vulnerability.
Which software is affected by CVE-2025-53283?
CVE-2025-53283 affects the borisolhor Drop Uploader for CF7 - Drag&Drop File Uploader Addon version 2.4.1 and earlier.
What attack vectors are associated with CVE-2025-53283?
CVE-2025-53283 allows attackers to upload a web shell to the web server, potentially compromising the system.