Drag and Drop Multiple File Upload for Contact Form 7

Explore Drag and Drop Multiple File Upload for Contact Form 7 vulnerabilities across all versions. Currently tracking 18 known vulnerabilities, including severity, impact, and patch status.

01234567891004.12.2018Today04.06.20209.8Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.3.2 - Arbitrary File Upload CVSS 9.8 · 04.06.202007.03.20227.2Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.6.2 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 07.03.202226.09.20225.3Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.6.4 - File Upload Size Limit Bypass CVSS 5.3 · 26.09.202224.02.20238.8Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.6.5 - Cross-Site Request Forgery in dnd_upload_cf7_upload and dnd_codedropz_upload_delete CVSS 8.8 · 24.02.202301.11.20238.1Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload CVSS 8.1 · 01.11.202329.04.20245.3Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure CVSS 5.3 · 29.04.202430.01.20255.3Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.8.5 - Limited Arbitrary File Deletion CVSS 5.3 · 30.01.202527.03.20258.8Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File Deletion CVSS 8.8 · 27.03.20257.5Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion CVSS 7.5 · 27.03.202516.06.20258.1Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks CVSS 8.1 · 16.06.202515.08.20255.3Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie CVSS 5.3 · 15.08.202506.01.20266.1Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.2 - Unauthenticated Limited Arbitrary File Upload CVSS 6.1 · 06.01.202614.01.20263.7Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion CVSS 3.7 · 14.01.202605.03.20268.1Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.5 - Unauthenticated Arbitrary File Upload CVSS 8.1 · 05.03.202617.04.20268.1Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass CVSS 8.1 · 17.04.20267.5Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field CVSS 7.5 · 17.04.202603.06.20267.2Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 03.06.202605.06.20264.4Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' Settings CVSS 4.4 · 05.06.2026

Strategic Overview

Avg CVSSMedium
6.9/ 10
Patch Coverage100%
Open

0

Fixed

18

Get automatic notifications for all Drag and Drop Multiple File Upload for Contact Form 7 vulnerabilities before they are exploited.

Vulnerability Records

18 records
2026-06-05 14:16CVE-2026-8991
4.4
Medium
Bao Luu Gia NguyenYes
2026-06-03 00:00CVE-2026-49055
7.2
High
fayespiegelYes
2026-04-17 04:37CVE-2026-5718
8.1
High
Leonid Semenenko (lsemenenko)Yes
2026-04-17 04:37CVE-2026-5710
7.5
High
Osvaldo Noe Gonzalez Del Rio (Os)Yes
2026-03-05 06:23CVE-2026-3459
8.1
High
Thomas SanzeyYes
2026-01-14 18:17CVE-2025-14457
3.7
Low
shark3yYes
2026-01-06 18:04CVE-2025-14842
6.1
Medium
andrea bocchettiYes
2025-08-15 19:13CVE-2025-8464
5.3
Medium
Thien TranYes
2025-06-16 20:35CVE-2025-3515
8.1
High
mikemyersYes
2025-03-27 00:00CVE-2025-2328
8.8
High
Phat RiOYes
Showing 1–10 of 18 reports
Drag and Drop Multiple File Upload for Contact Form 7 banner
Latestv1.3.9.8

Drag and Drop Multiple File Upload for Contact Form 7

Glen Don Mongaya

Author

Glen Don Mongaya

4.8(94)
96/100
Last Updated
2026-05-26 (2mo ago)
Active Installs
60,000+
Downloads
1,344,877
Requires WP
3.0.1+
Requires PHP
5.2.4+
Tested up to
WP 7.0.2
Created
2018-12-04 (8y ago)

Drag and Drop Multiple File Upload is a simple, straightforward WordPress plugin extension for Contact Form 7, which allows the user to upload multiple files using the drag-and-drop feature or the common browse-file of your webform. Drag and Drop Multiple File Upload for Contact Form 7 is an independent plugin, not affiliated with or endorsed by the developers of Contact Form 7. Here’s a little DEMO. Features File Type Validation File Size Validation Ajax Uploader Limit number of files Upload. Limit files size for each field Can specify custom file types or extension Manage Text and Error message in admin settings Drag & Drop or Browse File – Multiple Upload Support Multiple Drag and Drop in One Form. Able to delete uploaded file before being sent Send files as email attachment or as a links. (see note below) Support multiple languages Mobile Responsive Cool Progress Bar Compatible with any browser PLUGIN GUIDE – FREE VERSION Note: On Free version, all uploaded files moves to a temporary folder (“/wp-content/uploads/wp_dndcf7_uploads”) then attaches the file to the mail and sends it. After that “Drag & Drop File Upload” removes the file from the temporary folder 1 hour after the submission. ( same process with the default “file” upload of Contact Form 7 – See here ) To adjust or disable the auto-deletion feature, we suggest upgrading to the PRO version for more options (see below). ⭐ Premium Features ⭐ Check out the available features in the PRO version. Upload Large File – Supports uploading large files. Image Preview – Displays thumbnails for images. Auto Delete Files – Automatically deletes files after a set time (hours, weeks, days, months, etc) Zip Files – Compress uploaded files into a ZIP archive Save Files to Media Library – Store files in the WordPress media library. Change Upload Directory – Customize the default WordPress upload directory. Upload Folder – 📂 Choose a custom folder to store files: ✅ Contact Form 7 Fields: Use any field name ✅ Generated Date & Time: Timestamp-based folders ✅ Random Folder: Auto-generated letters & numbers ✅ By User: Requires login to store files in the user’s email or first name. ✅ Custom Folder: Manually input a folder name ✅ Dynamic Folder: User (name, id), Post (id, slug), CF7 field Send as Attachments, Zip, or Links – Flexible file delivery options. Chunked Uploads – Upload large files in smaller chunks to avoid timeouts. Max Total Size – Set the maximum combined size for all uploaded files. Parallel Upload – Limit simultaneous uploads to optimize server performance. Custom Filename – Define custom filename patterns: ( {filename}, {cf7-field-name}, {ip_address}, {random}, {post_id}, {post_slug}, etc. ) Color Options – Customize colors for file size, progress bar, filename, and more. Prevent Duplicate – Disable button to prevent duplicate submissions. Custom Theme – Switch between “Dark” or “Light” themes. Form Entries – Store form entries in WordPress admin. Seamless Remote Storage Integration 🔥 Supports: OneDrive, Google Drive, Amazon S3, Dropbox, FTP. Image Size Validation – Ensure images meet required width and height. Image Resize – Supports image resizing (e.g., 800&#215;800). (Standard Version Only) Optimize Image – Optimize images after resizing. (Standard Version Only) Security – Ensure security with regular updates, vulnerability scans, and threat protection. Optimized Code & Performance – Improve speed and efficiency. Pro version is also compatible with: Contact Form 7 Add-on – Arshid Database for Contact Form 7- Ninja Advanced Contact form 7 DB – Vsourz Digital You can get PRO Version here! PRO VERSION – PLUGIN OVERVIEW Other Plugins You May Like Order Files for WooCommerce An extension that attach files to existing WooCommerce orders, allowing both customers and admins to upload and manage files easily. Easy File Upload & Approval Easy File Upload & Approval – A simple file management plugin that lets users effortlessly upload and submit files for review through a clean and simple drag-and-drop interface. Drag & Drop Multiple File Upload – WooCommerce An extension for WooCommerce – Transform your simple file upload into beautiful “Drag & Drop Multiple File Upload”. Drag & Drop Multiple File Upload – WPForms An extension for WPForms – Transform your simple file upload into beautiful “Drag & Drop Multiple File Upload”.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C