Known vulnerabilities in Drag and Drop File Upload for Contact Form 7 1.0.2

Vendor: add-ons.org
Software: Drag and Drop File Upload for Contact Form 7
Version: 1.0.2
Software CPE: cpe:2.3:a:appointmentsbooking:drag-and-drop-file-upload-for-contact-form-7:*:*:*:*:*:wordpress:*:*
Website: https://profiles.wordpress.org/appointmentsbooking/
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Drag and Drop File Upload for Contact Form 7 version 1.0.2 Drag and Drop File Upload for Contact Form 7 1.0.2 is affected by 1 vulnerabilities: 1 high Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128151 - Unrestricted Upload of File with Dangerous Type
CVE-2026-5364		 CWE-434 High
No
No
 1.1.4 27.04.2026 SB20260427103