MW WP Form vulnerabilities

2 known vulnerabilities in MW WP Form from Monkey Wrench. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  MW WP Form: Unrestricted Upload of File with Dangerous Type

  CVE-2023-28409May 23, 2023Monkey WrenchEPSS 1.23%

  Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file.

• 9.8 Critical severity

  MW WP Form: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-28408May 23, 2023Monkey WrenchEPSS 1.78%

  Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website or cause a denial-of-service (DoS) condition, and obtain sensitive information depending on settings.