5M WordPress Sites Running ‘Contact Form 7’ Plugin Open to Attack

Posted by:

DEFENDEDGE

On:

December 17, 2020

A critical unrestricted file upload bug in Contact Form 7 allows an unauthenticated visitor to take over a site running the plugin.

Posted by