WeForms (N/a Through 1.6.28)

The Bold Grid weForms plugin is affected by an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability.