Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Mw Wp Form Project Clear all filters
TI-2023-05799 CVE-2023-6316 · GHSA-3w6w-q6rh-xhgj

MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 52

The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' function in versions up to, and including, 5.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01436 Published 2024-01-11 No fix listed CWE-434
TI-2023-12954 CVE-2023-28409 · GHSA-3hh7-86f2-m64w

Unrestricted file upload in Monkey Wrench Inc. MW WP Form

Priority MEDIUM 51

Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01226 Published 2023-05-23 No fix listed CWE-434
TI-2023-12953 CVE-2023-28408 · GHSA-3q42-588x-m4gv

Path traversal in Monkey Wrench Inc. MW WP Form

Priority MEDIUM 52

Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website or cause a denial-of-service (DoS) condition, and obtain sensitive information dep…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01776 Published 2023-05-23 No fix listed CWE-22