WordPress Contact Form - Full Path Disclosure
WordPress Contact Form plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly.
CVSS—
共找到 2 条公开漏洞记录
WordPress Contact Form plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly.
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.