Unrated severityNVD Advisory· Published May 17, 2024· Updated Apr 28, 2026
WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability
CVE-2024-32830
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeKraft BuddyForms allows Server Side Request Forgery, Relative Path Traversal.This issue affects BuddyForms: from n/a through 2.8.8.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=2.8.8+ 1 more
- (no CPE)range: <=2.8.8
- (no CPE)range: n/a
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.