Websoudan vulnerabilities

Products

• Mw Wp Form 15

Newest

• websoudan mw wp form MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameter CVE-2026-92086 5.3 MediumOctober 29, 2026
• websoudan mw wp form MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta) CVE-2026-96567 7.2 HighOctober 2, 2026
• unknown mw wp form MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge Tags CVE-2026-78363 4.8 MediumSeptember 1, 2026
• unknown mw wp form MW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Data List CVE-2026-78364 3.5 LowAugust 30, 2026
• takashi kitajima mw wp form WordPress MW WP Form plugin <= 5.1.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-48871 7.1 HighJune 15, 2026
• websoudan mw wp form MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter CVE-2026-8853 4.4 MediumJune 10, 2026
• websoudan mw wp form MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter CVE-2026-6206 5.3 MediumMay 14, 2026
• inc2734 mw wp form MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys CVE-2026-5436 8.1 HighApril 8, 2026
• inc2734 mw wp form MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir CVE-2026-4347 8.1 HighApril 2, 2026
• websoudan mw wp form WordPress MW WP Form plugin <= 4.4.5 - Broken Access Control vulnerability CVE-2023-46206 5.3 MediumJanuary 2, 2025
• web-soudan mw wp form WordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS) CVE-2024-24804 6.5 MediumFebruary 10, 2024
• inc2734 mw wp form, mw wp form project wp form +1 more MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload CVE-2023-6316 9.8 CriticalJanuary 11, 2024
• inc2734 mw wp form MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion CVE-2023-6559 7.5 HighDecember 16, 2023
• monkey wrench inc. mw wp form, mw wp form project wp form +1 more Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier,... CVE-2023-28409 9.8 CriticalMay 23, 2023
• monkey wrench inc. mw wp form, mw wp form project wp form +1 more Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote... CVE-2023-28408 9.8 CriticalMay 23, 2023