Update your Contact Form Wordpress plugin

[bartosimpsonio]

Contact Form 7 has a security issue that's being hacked all over.

Make sure to update the plugin. If you don't really need this plugin, I recommend you remove it.

https://www.bleepingcomputer.com/ne...illion-installs-has-a-critical-vulnerability/

 

[Mr Positive]

Updated it on my client sites, but if you deactivate it shows a broken page how to sort it?

 

[bartosimpsonio]

Updated it on my client sites, but if you deactivate it shows a broken page how to sort it?

If your template requires it, then there's no way out unless you rewrite the theme without this plugin.

Personally I wouldn't install a theme just for html forms. I'm old school, first thing I ever did in html was create a sales form (I think).

 

[Hawkster]

Lucky for me i don't use it on any of my 300 wordpress sites

 

[laur.laurix]

So you are in danger only if you have the upload file option enabled with contact form 7

 

[Thunder Digitals]

Just updating the plugin will be fine. I think no need for removing it.

 

[tamask]

a simple update can solve the problem