Lucene search

WPScanCVE-2021-24689

HistoryFeb 28, 2022 - 9:15 a.m.

CVE-2021-24689

2022-02-2809:15:07

CWE-22

WPScan

web.nvd.nist.gov

cve-2021-24689

contact forms

drag & drop

contact form builder

wordpress plugin

path traversal attack

arbitrary files

web server

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

47.6%

JSON

The Contact Forms - Drag & Drop Contact Form Builder WordPress plugin through 1.0.5 allows high privilege users to download arbitrary files from the web server via a path traversal attack

Affected configurations

Nvd

Vulners

Node

wpeverestcontact_formRange≤1.0.5wordpress

VendorProductVersionCPE
wpeverestcontact_form*cpe:2.3:a:wpeverest:contact_form:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
wpeverest	contact_form	*	cpe:2.3:a:wpeverest:contact_form::::::wordpress::*

CNA Affected

[
  {
    "product": "Contact Forms – Drag & Drop Contact Form Builder",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.0.5",
        "status": "affected",
        "version": "1.0.5",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/31824250-e0d4-4285-97fa-9880b363e075

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

47.6%

JSON

Related for CVE-2021-24689