Skip to content
OpenAdvisories

Vendor

mondula2016

3 known vulnerabilities.

Products

Multi Step Form 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-9515

    Multi Step Form <= 1.7.25 - Authenticated (Admin+) Arbitrary File Upload

    The Multi Step Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the import functionality in all versions up to, and including, 1.7.25. This makes it possible for authenticated attackers, with Administra…

    mondula2016 Multi Step Form Web / CMS