MW WP Form

Уязвимости

• CVE-2023-6316без авторизации≤ 5.0.1

  MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload

  Критич. 9.8

• CVE-2023-6559без авторизации≤ 5.0.3

  MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion

  Критич. 9.8

• CVE-2026-5436без авторизации≤ 5.1.1

  MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys

  Высокий 8.1

• CVE-2026-4347без авторизации≤ 5.1.0

  MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir

  Высокий 8.1

• CVE-2026-96567без авторизации≤ 5.1.7

  MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta)

  Высокий 7.2

• CVE-2026-48871без авторизации · нужен клик≤ 5.1.3

  WordPress MW WP Form plugin <= 5.1.3 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2024-24804нужен вход≤ 5.0.6

  WordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2026-6206без авторизации≤ 5.1.2

  MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter

  Средний 5.3

• CVE-2023-46206без авторизации≤ 4.4.5

  WordPress MW WP Form plugin <= 4.4.5 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-8853редактор+≤ 5.1.3

  MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter

  Средний 4.4