Multi Step Form vulnerabilities

2 known vulnerabilities in Multi Step Form from Mondula2016. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Multi Step Form: Unrestricted Upload of File with Dangerous Type

  CVE-2025-9515Sep 6, 2025Mondula2016

  The Multi Step Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the import functionality in all versions up to, and including, 1.7.25. This makes it possible for authenticated attackers, with Administrat

• 9.8 Critical severity

  Multi Step Form: Missing Authorization

  CVE-2024-50428Oct 29, 2024Mondula2016

  Missing Authorization vulnerability in mondula2016 Multi Step Form multi-step-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multi Step Form: from n/a through <= 1.7.21.