Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect for Contact Form 7: from n/a through <= 1.2.9.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-29 | 1 | Disclosure1 |
| 2026-04-08 | 1 | PoC1 |
CVE-2026-32496 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker al… https://www.cve.org/CVERecord?id=CVE-2026-32496
Post summary
The entry announces CVE-2026‑32496, a path traversal flaw in NYSL Spam Protect for Contact Form 7, without providing PoC, exploit details, or mitigation information.
https://atomicedge.io/cve-proof/cve-2026-32496-wp-contact-form-7-spam-blocker-version-1-2-9-medium-vulnerability-proof-of-concept CVE-2026-32496 #WordPress plugin #vulnerability wp-contact-form-7-spam-blocker #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsec…
Post summary
A proof‑of‑concept release for CVE‑2026‑32496 affecting WordPress’s wp‑contact‑form‑7‑spam‑blocker is referenced, with technical details but no exploit, active exploitation, or patch information.