WordPress Gravity Forms: Multiple Form Instances plugin <= 1.1.1 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Gravity Forms: Multiple Form Instances versions = 1.1.1...

CVE-2024-6550: Exposure of Sensitive Information to an Unauthorized Actor

The Gravity Forms: Multiple Form Instances plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.1. This is due to the plugin leaving test files with displayerrors on. This makes it possible for unauthenticated attackers to retrieve the full path of...

PT-2024-37707

Name of the Vulnerable Software and Affected Versions Gravity Forms: Multiple Form Instances plugin for WordPress versions up to, and including, 1.1.1 Description The issue is related to Full Path Disclosure, which occurs because the plugin leaves test files with display errors on. This allows...