WordPress / Joomla Creative Contact Form 0.9.7 Shell Upload

WordPress / Joomla Creative Contact Form plugin versions 0.9.7 and below suffer from a remote shell upload vulnerability.