Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-45364 EUVD-2022-48261GHSA-2j3q-chq2-h2fc

WordPress Drag and Drop Multiple File Upload – Contact Form 7 Plugin <= 1.3.6.5 is vulnerable to Cross Site Request Forgery (CSRF)

Published May 24, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Glen Don L. Mongaya Product: Drag and Drop Multiple File Upload – Contact Form 7

Description

Cross-Site Request Forgery (CSRF) vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload – Contact Form 7 plugin <= 1.3.6.5 versions.

Affected products

VendorProductAffectedFixed
Glen Don L. Mongaya Drag and Drop Multiple File Upload – Contact Form 7 ≤ 1.3.6.5 —

References