Skip to contentWebsoudan Mw Wp Form vulnerabilities
- websoudan mw wp formMW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' ParameterCVE-2026-920865.3 Medium
- websoudan mw wp formMW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta)CVE-2026-965677.2 High
- unknown mw wp formMW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge TagsCVE-2026-783634.8 Medium
- unknown mw wp formMW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Data ListCVE-2026-783643.5 Low
- takashi kitajima mw wp formWordPress MW WP Form plugin <= 5.1.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-488717.1 High
- websoudan mw wp formMW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' ParameterCVE-2026-88534.4 Medium
- websoudan mw wp formMW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query ParameterCVE-2026-62065.3 Medium
- inc2734 mw wp formMW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keysCVE-2026-54368.1 High
- inc2734 mw wp formMW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dirCVE-2026-43478.1 High
- websoudan mw wp formWordPress MW WP Form plugin <= 4.4.5 - Broken Access Control vulnerabilityCVE-2023-462065.3 Medium
- web-soudan mw wp formWordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)CVE-2024-248046.5 Medium
- inc2734 mw wp form, mw wp form project wp form +1 moreMW WP Form <= 5.0.1 - Unauthenticated Arbitrary File UploadCVE-2023-63169.8 Critical
- inc2734 mw wp formMW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File DeletionCVE-2023-65597.5 High
- monkey wrench inc. mw wp form, mw wp form project wp form +1 moreUnrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier,...CVE-2023-284099.8 Critical
- monkey wrench inc. mw wp form, mw wp form project wp form +1 moreDirectory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote...CVE-2023-284089.8 Critical