sh1zen vulnerabilities
6 published CVEs name sh1zen among the affected products.
- 6Published CVEs6 of them scored
- 4Last 12 monthspublished in the last year
- 5Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-6295
WP Optimizer <= 2.5.0 - Authenticated (Administrator+) SQL Injection via 's' Parameter
sh1zen · WP Optimizer – PageSpeed, Cache, Minify & Core Web Vitals
Medium4.9 - CVE-2026-87796
Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload
sh1zen · Multi Uploader for Gravity Forms
Critical9.8 - CVE-2026-5581
Multi Uploader for Gravity Forms <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Media Deletion
sh1zen · Multi Uploader for Gravity Forms
Critical9.1 - CVE-2025-14344
Multi Uploader for Gravity Forms <= 1.1.7 - Unauthenticated Arbitrary File Deletion
sh1zen · Multi Uploader for Gravity Forms
Critical9.8 - CVE-2025-53314
WordPress WP Optimizer plugin <= 2.5.0 - Cross Site Request Forgery (CSRF) vulnerability
sh1zen · WP Optimizer
Critical9.6 - CVE-2025-23921
WordPress Multi Uploader for Gravity Forms plugin <= 1.1.3 - Arbitrary File Upload vulnerability
sh1zen · Multi Uploader for Gravity Forms
Critical9.0