Description
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass size limit restriction when uploading files. WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 version 1.3.6.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.6.5 or latest
References
https://plugins.svn.wordpress.org/drag-and-drop-multiple-file-upload-contact-form-7/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin FL3R FeelBox Multiple Vulnerabilities (8.1)
b2evolution Other Vulnerability (CVE-2007-2358)
WordPress Plugin XCloner-Backup and Restore Multiple Vulnerabilities (3.1.2)
PHP Observable Discrepancy Vulnerability (CVE-2024-2408)
WordPress Plugin PowerPress Podcasting by Blubrry Unspecified Vulnerability (8.6.1)