← All credits
Thomas Sanzey
5 vulnerability records and advisories credit this contributor.
CVE-2026-5364
Drag and Drop File Upload for Contact Form 7 <= 1.1.3 - Unauthenticated Arbitrary File Upload via sanitize_file_name Bypass
CVE-2026-3180
Contest Gallery <= 28.1.4 - Unauthenticated SQL Injection
CVE-2024-0691
FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import
CVE-2023-6559
MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion
CVE-2026-3459
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.5 - Unauthenticated Arbitrary File Upload