PT-2025-1841

Name of the Vulnerable Software and Affected Versions Multi Step Form plugin for WordPress versions up to, and including, 1.7.23 Description The issue is related to a missing capability check on the fw upload file AJAX action, which allows unauthenticated attackers to upload limited file types,...