Description
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass size limit restriction when uploading files. WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 version 1.3.6.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.6.5 or latest
References
https://plugins.svn.wordpress.org/drag-and-drop-multiple-file-upload-contact-form-7/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Events Manager Cross-Site Scripting (5.8.1.1)
WordPress Plugin JobSearch WP Job Board Cross-Site Scripting (1.5.1)
WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk Cross-Site Scripting (5.136.3)
OpenSSL Use of Insufficiently Random Values Vulnerability (CVE-2019-1549)