Severe Security Vulnerability in WordPress Plugin Contact Form 7 Version 5.3.1 and Older

The developers of Contact Form 7 have reported:

“An unrestricted file upload vulnerability has been found in Contact Form 7 5.3.1 and older versions.

Utilizing this vulnerability, a form submitter can bypass Contact Form 7’s filename sanitization, and upload a file which can be executed as a script file on the host server.”