Contact Form Extender for Divi – Submissions DB & Extra Fields vulnerabilities
1 known vulnerability in Contact Form Extender for Divi – Submissions DB & Extra Fields from Satindersingh. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
Contact Form Extender for Divi – Submissions…: Improper Limitation of a Pathname to a Restricted Directory
The Contact Form Extender for Divi Builder plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient file path validation in the cfefd_remove_uploaded_file() function in all versions up to, and including, 1.0.6. This makes it possible f