What the vulnerability does
01Description
Path Traversal: '.../...//' vulnerability in corporatezen222 Contact Page With Google Map contact-page-with-google-map allows Path Traversal.This issue affects Contact Page With Google Map: from n/a through <= 1.6.1.
Explanation of Vulnerability in Simple Terms
02Summary
Contact Page With Google Map versions 1.6.1 and earlier contain a denial-of-service vulnerability accessible over the network without authentication. An attacker can send requests that exhaust server resources and make the site unavailable to legitimate users. The vulnerability affects the entire site due to scope change. No patch version is currently available.
What an attacker can do
03Attacker Capabilities
Make the site unavailable by exhausting server resources with network requests.
Potential impact on your site
04Site Impact
Your site becomes unavailable to visitors until the attack stops or the plugin is disabled.
Conditions required to exploit
05Prerequisites
Network access only; no authentication or user interaction required.
Key dates
06Disclosure timeline
November 20, 2024
CVE published
May 11, 2026
Record updated