Plugin icon

Drag and Drop Multiple File Upload for Contact Form 7

drag-and-drop-multiple-file-upload-contact-form-7

Vulnerabilities:

15

Last Updated:

March 5, 2026

Active Installs:

60000

Published
Title
Fixed in
CVSS
Published
2026-03-05
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.6 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 1.3.9.6
CVSS
8.1 (high)
Published
2026-01-14
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.3 - Missing Authorization to Unauthenticated File Deletion
Fixed in
Fixed in 1.3.9.3
CVSS
3.7 (low)
Published
2026-01-06
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.9.3 - Unauthenticated Limited Arbitrary File Upload
Fixed in
Fixed in 1.3.9.3
CVSS
6.1 (medium)
Published
2025-08-15
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.1 - Directory Traversal
Fixed in
Fixed in 1.3.9.1
CVSS
5.3 (medium)
Published
2025-06-16
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.0 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks
Fixed in
Fixed in 1.3.9.0
CVSS
8.1 (high)
Published
2025-03-27
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.8.9 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion
Fixed in
Fixed in 1.3.8.9
CVSS
7.5 (high)
Published
2025-03-27
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.8.8 - Unauthenticated Arbitrary File Deletion
Fixed in
Fixed in 1.3.8.8
CVSS
8.8 (high)
Published
2025-01-30
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.8.6 - Limited Arbitrary File Deletion
Fixed in
Fixed in 1.3.8.6
CVSS
5.3 (medium)
Published
2024-04-29
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.7.8 - Sensitive Information Exposure
Fixed in
Fixed in 1.3.7.8
CVSS
5.3 (medium)
Published
2023-11-01
Title
Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.7.4 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 1.3.7.4
CVSS
8.1 (high)
Published
2023-05-24
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.6.6 - File Upload and File deletion via CSRF
Fixed in
Fixed in 1.3.6.6
CVSS
5.4 (medium)
Published
2022-09-26
Title
Drag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass
Fixed in
Fixed in 1.3.6.5
CVSS
5.3 (medium)
Published
2022-03-07
Title
Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS
Fixed in
Fixed in 1.3.6.3
CVSS
6.1 (medium)
Published
2020-09-21
Title
Drag and Drop Multiple File Upload – Contact Form 7 < 1.3.5.5 - Unauthenticated Remote Code Execution
Fixed in
Fixed in 1.3.5.5
CVSS
9.8 (critical)
Published
2020-05-26
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.3.3 - Unauthenticated File Upload Bypass
Fixed in
Fixed in 1.3.3.3
CVSS
10.0 (critical)