CVE-2025-5746 | Drag and Drop Multiple File Upload Pro Plugin up to 1.7.1/5.0.5 on WordPress htaccess dnd_upload_cf7_upload_chunks unrestricted upload

A vulnerability was found in Drag and Drop Multiple File Upload Pro Plugin up to 1.7.1/5.0.5 on WordPress. It has been classified as critical. Affected is the function dnd_upload_cf7_upload_chunks of the file htaccess. The manipulation leads to unrestricted upload.

This vulnerability is traded as CVE-2025-5746. It is possible to launch the attack remotely. There is no exploit available.VulDB Recent EntriesRead More