Contact Form by WPForms – Drag & Drop Form Builder for WordPress, 3406a1ddccf3a7ae72c59d8e356a958cadcb9a69

CVE, Research URL: 3406a1ddccf3a7ae72c59d8e356a958cadcb9a69
Home page URL: Security reports for Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Application: Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Published on: Sep 19, 2022
Research Description: WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More [wpforms-lite] < 1.7.5.5 WordPress Contact Form by WPForms plugin <= 1.7.5.3 - Authenticated Arbitrary File Access vulnerability Authenticated Arbitrary File Access vulnerability discovered by Sybre Waaijer in WordPress Contact Form by WPForms plugin (versions <= 1.7.5.3). Update the WordPress Contact Form by WPForms plugin to the latest available version (at least 1.7.5.5).
Affected versions: max 1.7.5.5.
Status: vulnerable