CVE-2026-18781 | Drag and Drop Multiple File Upload for Contact Form 7 Plugin code injection

August 21, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Drag and Drop Multiple File Upload for Contact Form 7 Plugin 1.3.9.6 on WordPress. This vulnerability affects unknown code. This manipulation causes code injection.

This vulnerability is registered as CVE-2026-18781. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More