Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms Full Path Disclosure Vulnerability

A full path disclosure vulnerability has been identified in the Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin for WordPress, affecting all versions through 1.4.4. This vulnerability allows unauthenticated attackers to access the full path of the web application, potentially facilitating further attacks. While the disclosed information is not immediately harmful, it could be exploited in conjunction with other vulnerabilities to damage the affected website.

Impact

Exploitation of this vulnerability could lead to unauthorized exposure of the full server path, which may assist in launching additional attacks against the website.

Remediation

Users are advised to update the plugin to version 1.4.5 or a later patched version.