CVE-2023-28409

Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file...

CVE-2023-28409

MW WP Form (WordPress plugin) contains CVE-2023-28409: in versions up to v4.4.2, there is an unrestricted upload of files with dangerous types. This enables a remote unauthenticated attacker to upload an arbitrary file, potentially impacting confidentiality, integrity, and availability. The recom...

CVE-2023-28409

Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file...