CVE-2022-45852

Name of the Vulnerable Software and Affected Versions WP-FormAssembly versions n/a through 2.0.5

Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows Path Traversal in FormAssembly / Drew Buschhorn WP-FormAssembly.

Recommendations For WP-FormAssembly versions n/a through 2.0.5, update to a version later than 2.0.5 to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories to minimize the risk of exploitation.