CVE-2025-3515 | Drag and Drop Multiple File Upload for Contact Form 7 Plugin File Extension unrestricted upload

A vulnerability was found in Drag and Drop Multiple File Upload for Contact Form 7 Plugin up to 1.3.8.9 on WordPress and classified as critical. Affected by this issue is some unknown functionality of the component File Extension Handler. The manipulation leads to unrestricted upload.

This vulnerability is handled as CVE-2025-3515. The attack may be launched remotely. There is no exploit available.