CVE-2020-35489

Description

References

• contactform7.com/2020/12/17/contact-form-7-532 · Vendor Advisory
• wordpress.org/plugins/contact-form-7 · Release Notes
• wpscan.com/vulnerability/10508 · Third Party Advisory
• getastra.com/blog/911/plugin-exploit/contact-form-7-unrestricted-file-upload · Third Party Advisory
• jinsonvarghese.com/unrestricted-file-upload-in-contact-form-7 · Third Party Advisory

contact form 7 的其他漏洞

• CVE-2025-3247中危 5.3The Contact Form 7 plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 6.0.5 via the 'wpcf7_stripe_skip…
• CVE-2024-4704中危 6.1The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and redirect to the URL…
• CVE-2024-2242中危 6.1The Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘active-tab’ parameter in all versions up to…
• CVE-2023-6630中危 4.3The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, an…
• CVE-2023-6449高危 7.2The Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'validate' f…