WordPress security by component
Drag and Drop File Upload for Contact Form 7
Plugin description
Drag and Drop File Upload for Contact Form 7 is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Apr 24, 2026; the highest CVE/CNA score is 8.1.
Plugin slug:
drag-and-drop-file-upload-for-contact-form-7Latest vulnerability
CVE-2026-5364: Drag and Drop File Upload for Contact Form 7: Dangerous file upload
Drag and Drop File Upload for Contact Form 7 is affected by dangerous file upload. The vulnerable path is reachable without authentication. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise. The published affected range is <= 1.1.3.
| Safe version |
|
||
|---|---|---|---|
| Apr 24, 2026 |
CVE-2026-5364
Drag and Drop File Upload for Contact Form 7: Dangerous file upload
Drag and Drop File Upload for Contact Form 7 is affected by dangerous file upload. The vulnerable path is reachable without authentication. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise. The published affected range is <= 1.1.3.
|
> 1.1.3 |
CVE8.1
NVDPending
|