CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS
Percentile
71.8%
WordPress Plugin “Snow Monkey Forms” provided by Monkey Wrench Inc. contains a directory traversal vulnerability (CWE-22).
Arbitrary files on the server may be deleted by a remote attacker.
Update the plugin
Update the plugin according to the information provided by the developer.