PatchSiren

Glen Don Mongaya CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Glen Don Mongaya CVE published 2026-06-15

CVE-2026-49055

CVE-2026-49055 is a high-severity unauthenticated Cross Site Scripting (XSS) vulnerability in the Drag and Drop Multiple File Upload – Contact Form 7 plugin versions up to 1.3.9.7. Defenders should assess exposure, prioritize remediation, and verify inventory for this plugin. The CVE record was published on 2026-06-15T21:17:18.840Z and was last modified on 2026-10-25T23:10:00.167Z. The NVD entry is curren [truncated]