Skip to content
OpenAdvisories

Vendor

inc2734

10 known vulnerabilities.

Products

MW WP Form 4 Smart Custom Fields 3 Snow Monkey Blocks 1 Snow Monkey 1 Snow Monkey Forms 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-1056 Public exploit EPSS 13%

    Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path Traversal

    The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'generate_user_dirpath' function in all versions up to, and including, 12.0.3. This makes it possible for unauthenticated attac…

    inc2734 Snow Monkey Forms Web / CMS