The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to path traversal leading to arbitrary file read in versions up to and including 1.3.9.6.

🚨 EUVD-2026-23458 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: Drag and Drop Multiple File Upload for Contact Form 7 🏢 Vendor: glenwpcoder 📅 Updated: 2026-04-17 📝 The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary File Read in versions up to and including 1.3.9.6. This is due to the plugin... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23458 #cybersecurity #infosec #euvd #cve #vulnerability

🟠 CVE-2026-5710 - High (7.5) The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary File Read in versions up to and including 1.3.9.6. This is due to the plugin using client-supplied mfile[] POST val... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5710/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack