Drag and Drop Multiple File Upload for Contact Form 7 vulnerabilities
We track 1 vulnerability in Drag and Drop Multiple File Upload for Contact Form 7 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Drag and Drop Multiple File Upload for Contact Form 7 vulnerabilities
- 8.1 High severity
Drag and Drop Multiple File Upload for Contact…: Improper Control of Generation of Code
The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute a