| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | CVE-2026-5436 | 8 Apr 202620:25 | – | attackerkb |
 | CVE-2026-5436 | 8 Apr 202622:54 | – | circl |
 | WordPress plugin MW WP Form has a path traversal vulnerability. | 8 Apr 202600:00 | – | cnnvd |
 | CVE-2026-5436 MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys | 8 Apr 202620:25 | – | cvelist |
 | EUVD-2026-20643 | 8 Apr 202621:33 | – | euvd |
 | CVE-2026-5436 | 8 Apr 202621:17 | – | nvd |
 | WordPress MW WP Form plugin <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys vulnerability | 10 Apr 202609:50 | – | patchstack |
 | PT-2026-31452 | 8 Apr 202600:00 | – | ptsecurity |
 | CVE-2026-5436: Improper Limitation of a Pathname to a Restricted Directory | 8 Apr 202600:00 | – | rapid7 |
 | CVE-2026-5436 | 11 Apr 202601:22 | – | redhatcve |
10
Node
[
{
"vendor": "inc2734",
"product": "MW WP Form",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "5.1.1",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| mwf_upload_files[] | request body | /wp-admin/admin-ajax.php | The MW WP Form plugin fails to validate the key in the mwf_upload_files[] POST parameter, allowing an attacker to use path traversal or absolute paths to move or read arbitrary files on the server. | CWE-22 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
24 Jul 2026 20:10Current
6.2Medium risk
Vulners AI Score6.2
CVSS 3.18.1
EPSS0.01069
SSVC