Skip to content
OpenAdvisories

Vendor

flamix

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Flamix: Bitrix24 and Contact Form 7 integrations <= 3.1.0 - Unauthenticated Full Path Disclosure

    The Flamix: Bitrix24 and Contact Form 7 integrations plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.1.0. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This make…