{"id":"CVE-2026-94666","published":"2026-10-09T10:16:41.690","lastModified":"2026-10-11T13:17:29.173","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from n/a through 4.2.1.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/generate-pdf-using-contact-form-7/vulnerability/wordpress-generate-pdf-using-contact-form-7-plugin-4-2-1-arbitrary-file-download-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows attackers to perform path traversal attacks on the Generate PDF using Contact Form 7 plugin, potentially enabling them to read arbitrary files from the server's filesystem. This is a high-severity issue because it can lead to sensitive data exposure without requiring authentication.","exploitability":"Exploitation is relatively straightforward with no special preconditions needed, as the vulnerability affects an unauthenticated endpoint that allows traversal beyond the intended directory boundaries.","blast_radius":"If exploited, this vulnerability could allow attackers to access sensitive files like configuration files, database credentials, or other system files that might contain critical business or personal data.","remediation":"Upgrade to version 4.2.2 or later to remediate this path traversal vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","web","file-access","unauthenticated"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:03:11.737Z"}}