Lucene search
Jinson Varghese BehananWPVDB-ID:7391118E-EEF5-4FF8-A8EA-F6B65F442C63HistoryDec 17, 2020 - 12:00 a.m.
Contact Form 7 < 5.3.2 - Unrestricted File Upload
2020-12-1700:00:00
Jinson Varghese Behanan
wpscan.com
228
The popular WordPress plugin, Contact Form 7 was found to be vulnerable to Unrestricted File Upload.
PoC
Append a unicode special character (from U+0000 [null] to U+001F [us]) to a filename and upload it via the ContactForm7 upload feature
| CPE | Name | Operator | Version |
|---|---|---|---|
| contact-form-7 | lt | 5.3.2 |
Related
wpexploit
wpexploit
Contact Form 7 < 5.3.2 - Unrestricted File Upload
2020-12-17 00:00:00
openvas
openvas
WordPress Contact Form 7 Plugin < 5.3.2 RCE Vulnerability
2020-12-22 00:00:00
osv
osv
CVE-2020-35489
2020-12-17 19:15:14
githubexploit
githubexploit
prion
prion
Unrestricted file upload
2020-12-17 19:15:00
nuclei
nuclei
WordPress Contact Form 7 - Unrestricted File Upload
2021-03-21 17:51:13
cve
cve
CVE-2020-35489
2020-12-17 19:15:00
threatpost
threatpost
5M WordPress Sites Running 'Contact Form 7' Plugin Open to Attack
2020-12-17 22:27:38
Related for WPVDB-ID:7391118E-EEF5-4FF8-A8EA-F6B65F442C63