Flamix: Bitrix24 and Contact Form 7 integrations <= 3.1.0 - Unauthenticated Full Path Disclosure
mediumThe Flamix: Bitrix24 and Contact Form 7 integrations plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.1.0. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possible for unauthenticated attackers to retrieve the f...
- CVSS:
- 5.3
- Affected:
- up to 3.1.0
- Fixed in:
- 3.2.0
- Disclosed:
- Aug 20, 2024