CVE-2025-14842 | glenwpcoder Drag and Drop Multiple File Upload for Contact Form 7 Plugin unrestricted upload

A vulnerability was found in glenwpcoder Drag and Drop Multiple File Upload for Contact Form 7 Plugin up to 1.3.9.2 on WordPress. It has been rated as critical. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in unrestricted upload.

This vulnerability is identified as CVE-2025-14842. The attack can be initiated remotely. There is not any exploit available.