Skip to content
OpenAdvisories

Vendor

mondula2016

3 known vulnerabilities.

Products

Multi Step Form 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-12427

    Multi Step Form <= 1.7.23 - Missing Authorization to Unauthenticated Limited File Upload

    The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJAX action in all versions up to, and including, 1.7.23. This makes it possible for unauthenticated attackers t…

    mondula2016 Multi Step Form Web / CMS
  • Medium 4.3
    CVE-2024-50428

    WordPress Multi Step Form plugin <= 1.7.21 - Broken Access Control vulnerability

    Missing Authorization vulnerability in mondula2016 Multi Step Form multi-step-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multi Step Form: from n/a through <= 1.7.21.

    mondula2016 Multi Step Form