https://blog.wpsec.com/contact-form-7-vulnerability/
CVE-2020-35489: Unrestricted File Upload Vulnerability found in Contact Form 7 plugin affects 5M+ websites