Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-28890 EUVD-2024-25957GHSA-5q9m-f76w-7rm3

Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a…

Published Apr 23, 2024 · Updated Nov 18, 2024 · Assigned by jpcert

Description

Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessing files on the server, alter the site that uses the plugin, and cause a denial-of-service (DoS) condition.

Affected products

VendorProductAffectedFixed
WPMU DEV Forminator prior to 1.29.0 —

References