plugin updates

wp/wp-content/plugins/contact-form-7/includes/formatting.php

@@ -261,7 +261,7 @@ function wpcf7_canonicalize( $text, $args = '' ) {
  * @return string Sanitized unit-tag.
  */
 function wpcf7_sanitize_unit_tag( $tag ) {
-	$tag = preg_replace( '/[^A-Za-z0-9_-]/', '', $tag );
+	$tag = preg_replace( '/[^A-Za-z0-9_-]/', '', (string) $tag );
 	return $tag;
 }
 

wp/wp-content/plugins/contact-form-7/includes/rest-api.php

@@ -355,6 +355,13 @@ class WPCF7_REST_Controller {
 			$request->get_param( '_wpcf7_unit_tag' )
 		);
 
+		if ( empty( $unit_tag ) ) {
+			return new WP_Error( 'wpcf7_unit_tag_not_found',
+				__( "There is no valid unit tag.", 'contact-form-7' ),
+				array( 'status' => 400 )
+			);
+		}
+
 		$result = $item->submit();
 
 		$response = array_merge( $result, array(