WordPress Plugin Security Update Advisory (CVE-2026-114432)

Overview

A security update has been released to address a vulnerability in a WordPress plugin. The affected product is Contact Form 7, and users should update to the latest version.

Affected Parties

• Contact Form 7 버전 6.2.0 이상 6.2.4 미만.

Vulnerability Details

• CVE-2026-114432 is a critical vulnerability in Contact Form 7 involving insufficient restrictions on files uploaded in certain formats. – According to the information on the reference site, this vulnerability is described as “Unauthenticated Arbitrary File Upload via Invalid UTF-8 Filename.”

Action Items

• The latest update includes the Vulnerability Patch. – You must update to Contact Form 7 version 6.2.4 or later.

Note

• [1] Contact Form 7 6.2 – 6.2.3 – Unauthenticated Arbitrary File Upload via Invalid UTF-8 Filename.