Description

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder version 1.6.5 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.6.6 or latest

References

https://wordpress.org/plugins/form-maker/changelog/

Related Vulnerabilities

Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3396)

Moodle Configuration Vulnerability (CVE-2012-0797)

WordPress Plugin Caldera Forms-More Than Contact Forms Arbitrary File Disclosure (1.8.1)

Python URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-28861)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2607)

Severity

High

Tags

Missing Update