CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect for Contact Form 7: from n/a through <= 1.2.9.
Explanation of Vulnerability in Simple Terms
Spam Protect for Contact Form 7 versions up to 1.2.9 contain a path traversal vulnerability that allows high-privilege users to cause a denial of service by accessing files outside the intended directory. The vulnerability requires administrator-level access and affects the availability of the site. Update to a version newer than 1.2.9 to resolve this issue.
What an attacker can do
An administrator can trigger a denial of service by traversing the file system to access restricted files.
Potential impact on your site
Site administrators with malicious intent could crash or disable your site by exploiting this file access vulnerability.
Conditions required to exploit
Attacker must have high-level administrative privileges on the WordPress site.
Key dates
External resources
Related vulnerabilities
