Mw_wp_form_project Mw_wp_form
3 CVEs affecting Mw_wp_form_project Mw_wp_form. Latest disclosed: 2024-01-11. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6316 | Critical | 9.8 | 2024-01-11 | The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' function in v… |
CVE-2023-28409 | Critical | 9.8 | 2023-05-23 | Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload a… |
CVE-2023-28408 | Critical | 9.8 | 2023-05-23 | Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website or cause a denial-of-… |