WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Security Bypass (1.3.6.4)
Description
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass size limit restriction when uploading files. WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 version 1.3.6.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.6.5 or latest