CVE-2024-6568

🗓️ 21 Aug 2024 06:08:15Reported by WordfenceType

The Flamix plugin for WordPress has a Full Path Disclosure vulnerability

Reporter	Title	Published	Views	Family All 4
Vulnrichment	CVE-2024-6568 Flamix: Bitrix24 and Contact Form 7 integrations <= 3.1.0 - Unauthenticated Full Path Disclosure	21 Aug 202405:30	–	vulnrichment
Cvelist	CVE-2024-6568 Flamix: Bitrix24 and Contact Form 7 integrations <= 3.1.0 - Unauthenticated Full Path Disclosure	21 Aug 202405:30	–	cvelist
NVD	CVE-2024-6568	21 Aug 202406:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (August 19, 2024 to August 25, 2024)	29 Aug 202413:48	–	wordfence

Vulners

Node

flamix flamix\Match_bitrix24_and_contact_form_7_integrationswordpress

[
  {
    "vendor": "flamix",
    "product": "Flamix: Bitrix24 and Contact Form 7 integrations",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "3.1.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/da2050ea-70b3-476d-841f-021c3baddf35
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/flamix-bitrix24-and-contact-forms-7-integrations/trunk/includes/vendor/mobiledetect/mobiledetectlib/export/exportToJSON.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Aug 2024 06:15Current

5.2Medium risk

Vulners AI Score5.2

CVSS35.3

EPSS0.001

CWE-200