TI-2025-08720 CVE-2025-9515 · GHSA-pm69-c5jv-gmxx
Multi Step Form <= 1.7.25 - Authenticated (Admin+) Arbitrary File Upload
Priority LOW 33
The Multi Step Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the import functionality in all versions up to, and including, 1.7.25.