title: Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File Read
description: The Contact Forms - Drag & Drop Contact Form Builder WordPress plugin through 1.0.5 allows high privilege users to download arbitrary files from the web server via a path traversal attack
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
product: Contact Forms – Drag & Drop Contact Form Builder
vendor: Unknown
versions:
lessThanOrEqual: 1.0.5, status: affected, version: 1.0.5, versionType: custom
}