Skip to content
OpenAdvisories

Vendor

inc2734

10 known vulnerabilities.

Products

MW WP Form 4 Smart Custom Fields 3 Snow Monkey Blocks 1 Snow Monkey 1 Snow Monkey Forms 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-1056 Public exploit EPSS 13%

    Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path Traversal

    The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'generate_user_dirpath' function in all versions up to, and including, 12.0.3. This makes it possible for unauthenticated attac…

    inc2734 Snow Monkey Forms Web / CMS
  • Critical 9.8
    CVE-2023-6316

    MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload

    The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload …

    inc2734 MW WP Form Web / CMS