Contact Form by WPForms – Drag & Drop Form Builder for WordPress, faa56a23-66bc-4dd7-a5b0-81ea6365d75a
- CVE, Research URL
- Published on
- -
- Research Description
- WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.7.5.5 Contact Form by WPForms < 1.7.5.5 - Admin+ Arbitrary File Access The plugin does not validate email template paths, which could allow high privilege users such as admin (for example in multisite) to access arbitrary files on the web server via a path traversal attack
- Affected versions
-
max 1.7.5.5.
- Status
-
vulnerable