WordPress Plugin Vulnerabilities

Contact Form 7 <= 3.5.2 - File Upload Remote Code Execution

Description

The Contact Form 7 WordPress plugin was affected by a File Upload Remote Code Execution security vulnerability.

Affects Plugins

Plugin icon
contact-form-7
Fixed in 3.5.3

References

URL
https://packetstormsecurity.com/files/#124154/

Miscellaneous

Verified
No
WPVDB ID
f307ec17-da98-424f-b784-7cb63351aa8e

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-06-18
Title
Salon Booking System < 10.3 - Unauthenticated Arbitrary File Upload
Published
2025-03-31
Title
WP Pro Real Estate 7 < 3.5.5 - Authenticated (Custom) Arbitrary File Upload
Published
2024-10-31
Title
GEO My WordPress < 4.5 - Admin+ Arbitrary File Upload
Published
2025-07-11
Title
Helpdesk Support Ticket System for WooCommerce <= 2.1.0 - Unauthenticated Arbitrary File Upload
Published
2022-08-09
Title
WPide < 3.0 - Admin+ Arbitrary File Edit & Upload