MW WP Form, f8ff86f77b0d6ce822aaa5af5c71d680ab99821f

CVE, Research URL: f8ff86f77b0d6ce822aaa5af5c71d680ab99821f
Home page URL: Security reports for MW WP Form
Application: MW WP Form
Published on: May 08, 2023
Research Description: MW WP Form [mw-wp-form] < 4.4.3 (closed) MW WP Form <= 4.4.2 - Directory Traversal via _file_upload The MW WP Form plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.4.2 via the _file_upload function. This allows unauthenticated attackers to upload files of allowed types to arbitrary directories on the site.
Affected versions: max 4.4.3.
Status: vulnerable