The Contact Page With Google Map plugin (corporatezen222) up to version 1.6.1 contains a path traversal vulnerability identified as CVE-2024-52447. The vulnerability involves the use of the '.../...//' sequence to traverse directories improperly, potentially allowing an attacker to access or disrupt files outside the intended directory scope. The CVSS 3.1 score is 8.6, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and a scope change. The impact is limited to availability, with no confidentiality or integrity impact reported. No patch or vendor advisory is currently available.

The vulnerability can be exploited remotely without authentication or user interaction, potentially causing denial of service or disruption of availability in the affected plugin. There is no reported impact on confidentiality or integrity. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting access to the vulnerable plugin to mitigate potential exploitation.