arjean

Noticed you added a tag;
I cleared all caches and it now shows a version number in the composer.lock file.
Thank you!

Hi Glen,

It seems your tagging is off.
Your latest version is not tagged:
https://plugins.trac.www.ads-software.com/browser/drag-and-drop-multiple-file-upload-contact-form-7/tags
https://plugins.svn.www.ads-software.com/drag-and-drop-multiple-file-upload-contact-form-7/tags/

“That is visible in the composer.lock, which is pointing to the latest cause this tag doesn’t exist on the svn. It is pointing to trunk” (origin from: https://www.ads-software.com/support/topic/last-version-isnt-tagged/ )

Can you add the tag 1.3.7.7 ?
Thank you in advance.

We tried hard to figure out what is wrong. But not being able to solve it so far.
From our DTAP only the Production server has this issue.
For now we call WP RSS tasks manually via the CLI command via a system cron so everything at least gets updated until we really solve this issue.

We can reproduce this issue in a Docker environment. When the docker server cannot reach itself via the domain name and it will count up in the same way. When we adjust the host file inside the docker so the domain is routed internally, the issue disappears. The Production server is correctly routed.

I can confirm that 2.0.6 got hacked.
I am not sure about 2.0.7 though.

From their release log it seems that a security issue got fixed:
2.0.7
* Fixed. security issues

@aewing2021 & @cordi what versions do you use?

Will deactivate the plugin for now.