Vulnerabilities and Security Researches

Contact Form 7, CVE-2020-35489

CVE, Research URL: CVE-2020-35489
Home page URL: Security reports for Contact Form 7
Application: Contact Form 7
Published on: Dec 18, 2020
Research Description: The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters.
Affected versions: max 5.3.2.
Status: vulnerable