Drag and Drop Multiple File Upload – Contact Form 7

Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks vulnerability <= 1.3.8.9

Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion vulnerability <= 1.3.8.7

Unauthenticated Arbitrary File Deletion vulnerability <= 1.3.8.7

Limited Arbitrary File Deletion vulnerability <= 1.3.8.5

Sensitive Information Exposure vulnerability <= 1.3.7.7