Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: NYSL Clear all filters
TI-2026-25024 CVE-2026-32496 · GHSA-w3cm-8fgm-q9x2

WordPress Spam Protect for Contact Form 7 plugin <= 1.2.9 - Arbitrary File Deletion vulnerability

Priority LOW 30

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect fo…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00378 Published 2026-03-25 No fix listed CWE-22