December 18, 2020 at 01:52PM

■■■■□ 5M WordPress sites running ‘Contact Form 7’ plugin which has an unrestricted file upload bug that allows an unauthenticated visitor to take over a site.

https://threatpost.com/contact-form-7-plugin-bug/162383/

https://t.me/cKure/6406