Vulnerability Discovered in Contact Form 7 < 5.3.1

Contact Form 7 WordPress plugin has 5 million active installations and is one of the most popular plugins on the platform. In versions prior to 5.3.1, there is a vulnerability that allows attackers to upload a file which can be executed as a script file on the host server. From what I can understand this will impact you if you use the file upload fields in your forms.

The issue has been fixed in Version 5.3.2 which is available now from the WordPress Plugin Repo.