CVE-2023-28408

🗓️ 23 May 2023 00:00:00Reported by jpcertType

Directory traversal vulnerability in MW WP Form v4.4.2 and earlie

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2023-28408	23 May 202302:15	–	attackerkb
Circl	CVE-2023-28408	23 May 202307:25	–	circl
CNNVD	WordPress plugin MW WP Form 路径遍历漏洞	15 May 202300:00	–	cnnvd
Cvelist	CVE-2023-28408	23 May 202300:00	–	cvelist
EUVD	EUVD-2023-32104	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#01093915: Multiple vulnerabilities in WordPress Plugin "MW WP Form" and "Snow Monkey Forms"	15 May 202300:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in WordPress Plugin "MW WP Form" and "Snow Monkey Forms"	15 May 202305:29	–	jvn
NVD	CVE-2023-28408	23 May 202302:15	–	nvd
Prion	Directory traversal	23 May 202302:15	–	prion
Positive Technologies	PT-2023-21696 · WordPress · Mw Wp Form	23 May 202300:00	–	ptsecurity

NVD

Vulners

Node

mw_wp_form_project mw_wp_formRange≤4.4.2wordpress

[
  {
    "vendor": "Monkey Wrench Inc.",
    "product": "MW WP Form",
    "versions": [
      {
        "version": "versions v4.4.2 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
plugins	www.plugins.2inc.org/mw-wp-form/blog/2023/05/08/752/
jvn	www.jvn.jp/en/jp/JVN01093915/

17 Jan 2025 19:15Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8

EPSS0.03631

SSVC

CWE-22

cve-2023-28408 directory traversal mw wp form vulnerability security nvd