First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-24689

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

The Contact Forms - Drag & Drop Contact Form Builder WordPress plugin through 1.0.5 allows high privilege users to download arbitrary files from the web server via a path traversal attack

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Unknown	Contact Forms – Drag & Drop Contact Form Builder	>= 1.0.5, <= 1.0.5

References

https://wpscan.com/vulnerability/31824250-e0d4-4285-97fa-9880b363e075Exploit, Third Party Advisory
https://wpscan.com/vulnerability/31824250-e0d4-4285-97fa-9880b363e075Exploit, Third Party Advisory

Timeline

Published: Feb 28, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-246905.4The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin's settings.CVE-2021-246914.8The Quiz And Survey Master WordPress plugin before 7.3.2 does not escape the Quiz Url Slug setting before outputting it in some pages, which CVE-2021-246926.5The Simple Download Monitor WordPress plugin before 3.9.5 allows users with a role as low as Contributor to download any file on the web ser CVE-2021-246939.0The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the "File Thumbnail" post meta before outputting it in some pages,CVE-2021-246945.4The Simple Download Monitor WordPress plugin before 3.9.11 could allow users with a role as low as Contributor to perform Stored Cross-Site CVE-2021-246957.5The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or auth CVE-2021-246968.8The Simple Download Monitor WordPress plugin before 3.9.9 does not enforce nonce checks, which could allow attackers to perform CSRF attacks CVE-2021-246976.1The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the 1) sdm_active_tab GET parameter and 2) sdm_stats_start_date/sd CVE-2021-246984.3The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads CVE-2021-246995.4The Easy Media Download WordPress plugin before 1.1.7 does not escape the text argument of its shortcode, which could allow users with a rol CVE-2021-247004.8The Forminator WordPress plugin before 1.15.4 does not sanitize and escape the email field label, which could allow high privilege users to CVE-2021-247014.8The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in oth