Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-28408 EUVD-2023-32104GHSA-3q42-588x-m4gv

Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website o…

Published May 23, 2023 · Updated Jan 17, 2025 · Assigned by jpcert

Description

Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website or cause a denial-of-service (DoS) condition, and obtain sensitive information depending on settings.

Affected products

VendorProductAffectedFixed
Monkey Wrench MW WP Form versions v4.4.2 and earlier —

References