drag and drop multiple file upload - contact form 7 vulnerabilities and fixes

Recent CVEs affecting drag and drop multiple file upload - contact form 7, with upgrade or downgrade steps. 4 tracked.

Also searched as: drag and drop multiple file upload contact form 7, draganddropmultiplefileupload-contactform7.

drag and drop multiple file upload - contact form 7 has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-06-17. Highest priority: CVE-2025-3515 (score 57/100).

• CVE-2025-3515 HIGH 8.1 UPGRADE The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file
• CVE-2025-2485 HIGH 7.5 UPGRADE The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Inj
• CVE-2025-2328 HIGH 8.8 UPGRADE The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file
• CVE-2024-12267 MEDIUM 5.3 UPGRADE The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to limited arbitrar

FAQ

How do I fix drag and drop multiple file upload - contact form 7 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is drag and drop multiple file upload - contact form 7 being exploited right now?

None of the tracked drag and drop multiple file upload - contact form 7 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which drag and drop multiple file upload - contact form 7 CVE should I patch first?

CVE-2025-3515 currently ranks highest (57/100): The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file.

RSS feed for drag and drop multiple file upload - contact form 7 · ← Back to latest CVEs