CyberRota Analysis
AI-GeneratedThe Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin prior to version 1.3.9.9 is vulnerable due to inadequate validation of uploaded file names, enabling unauthenticated users to bypass file type restrictions and potentially execute arbitrary code on the server. This vulnerability poses a significant risk to WordPress sites utilizing the affected plugin, particularly those handling sensitive data or user interactions. Website administrators and security teams should prioritize updating to the latest version to mitigate the risk of exploitation.
Original NVD Description
The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server.