WordPress Data Source for Contact Form 7 - Full Path Disclosure
WordPress Plugin CData Source for Contact Form 7 files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly.
cf7-data-sourcePoC 已收录
CVSS—