MW WP Form

Güvenlik açıkları

• CVE-2023-6316kimlik doğrulamasız≤ 5.0.1

  MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload

  Kritik 9.8

• CVE-2023-6559kimlik doğrulamasız≤ 5.0.3

  MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion

  Kritik 9.8

• CVE-2026-5436kimlik doğrulamasız≤ 5.1.1

  MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys

  Yüksek 8.1

• CVE-2026-4347kimlik doğrulamasız≤ 5.1.0

  MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir

  Yüksek 8.1

• CVE-2026-96567kimlik doğrulamasız≤ 5.1.7

  MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta)

  Yüksek 7.2

• CVE-2026-48871kimlik doğrulamasız · tıklama gerekir≤ 5.1.3

  WordPress MW WP Form plugin <= 5.1.3 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2024-24804giriş gerekir≤ 5.0.6

  WordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2026-6206kimlik doğrulamasız≤ 5.1.2

  MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter

  Orta 5.3

• CVE-2023-46206kimlik doğrulamasız≤ 4.4.5

  WordPress MW WP Form plugin <= 4.4.5 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-8853editör+≤ 5.1.3

  MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter

  Orta 4.4