Access violation vulnerability in Drag and Drop Multiple File Upload for Contact Form 7 1.3.9.0

A plugin called “Drag and Drop Multiple File Upload for Contact Form 7” on WordPress has a security flaw that could allow people to access and delete files in places they shouldn’t be able to. This vulnerability affects all versions up to 1.3.9.0 and can be exploited by anyone, even without logging in. However, the risk is somewhat low since the plugin only allows certain types of files to be uploaded and only in a specific folder.