Mondula

8 CVEs across 1 Mondula products. Browse Mondula vulnerabilities, severities, and proof-of-concept exploits.

Mondula products with known CVEs

ProductCVEs
Multi Step Form8
Mondula CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-12427Medium5.32025-01-16The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJAX action…
CVE-2024-50428Medium4.32024-10-29Missing Authorization vulnerability in mondula2016 Multi Step Form multi-step-form allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2024-25905Medium5.42024-02-21Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form.This issue affects Multi Step Form: from n/a through 1.7.18.
CVE-2023-50832Medium5.92023-12-21Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mondula GmbH Multi Step Form allows Stored XSS.This issue…
CVE-2023-47758Medium5.42023-11-22Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form plugin <= 1.7.11 versions.
CVE-2022-4196Medium4.82023-01-09The Multi Step Form WordPress plugin before 1.7.8 does not sanitise and escape some of its form fields, which could allow high privilege users such as admin to…
CVE-2018-14846Medium5.42018-12-20The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php.
CVE-2018-14430Medium6.12018-07-25The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fw_data [id][1], fw_data [id][2], fw_data [id][3], fw_data [id][4], or email…