Access violation vulnerability in Drag and Drop Multiple File Upload for Contact Form 7 1.3.8.7

A plugin called “Drag and Drop Multiple File Upload for Contact Form 7” used on WordPress websites has a security issue. It doesn’t check file paths properly, which means someone could delete important files on the website. This could let hackers run malicious code on the website if an administrator deletes a certain message. To use this vulnerability, the website also needs to have another plugin called “Flamingo” installed and active.