CVE-2024-52447 HIGH

CVE-2024-52447: WordPress Contact Page With Google Map plugin <= 1.6.1 - Arbitrary File Deletion vulnerability

Vendor Corporatezen222
Product Contact Page With Google Map
Weakness CWE-35
Published November 20, 2024
Last update May 11, 2026

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

What the vulnerability does

01Description

Path Traversal: '.../...//' vulnerability in corporatezen222 Contact Page With Google Map contact-page-with-google-map allows Path Traversal.This issue affects Contact Page With Google Map: from n/a through <= 1.6.1.

Explanation of Vulnerability in Simple Terms

02Summary

Contact Page With Google Map versions 1.6.1 and earlier contain a denial-of-service vulnerability accessible over the network without authentication. An attacker can send requests that exhaust server resources and make the site unavailable to legitimate users. The vulnerability affects the entire site due to scope change. No patch version is currently available.

What an attacker can do

03Attacker Capabilities

Make the site unavailable by exhausting server resources with network requests.

Potential impact on your site

04Site Impact

Your site becomes unavailable to visitors until the attack stops or the plugin is disabled.

Conditions required to exploit

05Prerequisites

Network access only; no authentication or user interaction required.

Key dates

06Disclosure timeline

November 20, 2024 CVE published
May 11, 2026 Record updated

Related vulnerabilities

08Related CVE