Cpe:2.3:a:contact_form_7:contact_form_7:*:*:*:*:*:wordpress:*:*

The Contact Form 7 WordPress plugin before version 6.2.4 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to write files to the server and potentially execute code via improperly configured PHP handlers.