CyberSecBulletin

Mondula2016 vulnerabilities

We track 2 vulnerabilities in Mondula2016 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 6, 2025.

2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score

Latest Mondula2016 vulnerabilities

  • 7.2 High severity

    Multi Step Form: Unrestricted Upload of File with Dangerous Type

    CVE-2025-9515Mondula2016

    The Multi Step Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the import functionality in all versions up to, and including, 1.7.25. This makes it possible for authenticated attackers, with Administrat

  • 9.8 Critical severity

    Multi Step Form: Missing Authorization

    CVE-2024-50428Mondula2016

    Missing Authorization vulnerability in mondula2016 Multi Step Form multi-step-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multi Step Form: from n/a through <= 1.7.21.