Drag and Drop Multiple File Upload – Contact Form 7

Contact Form 7 plugin <= 1.3.7.3 Unauthenticated Arbitrary File Upload vulnerability <= 1.3.7.3

Multiple CSRF vulnerabilities <= 1.3.6.5

File Upload Size Limit Bypass vulnerability <= 1.3.6.4

Unauthenticated Stored CrossSite Scripting (XSS) vulnerability <= 1.3.6.2

Unauthenticated Remote Code Execution vulnerability <= 1.3.5.4