AForms <= 2.2.6 - Unauthenticated Full Path Disclosure
mediumThe AForms — Form Builder for Price Calculator & Cost Estimation plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.6. This is due to the plugin utilizing the aura library and allowing direct access to the phpunit test files. This makes it possible for unauthenticated a...
- CVSS:
- 5.3
- Affected:
- up to 2.2.6
- Fixed in:
- 2.2.7
- Disclosed:
- Jul 15, 2024