CVE-2024-12427

The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fwuploadfile AJAX action in all versions up to, and including, 1.7.23. This makes it possible for unauthenticated attackers to upload limited file types such as imag...

PT-2025-1841

Name of the Vulnerable Software and Affected Versions Multi Step Form plugin for WordPress versions up to, and including, 1.7.23 Description The issue is related to a missing capability check on the fw upload file AJAX action, which allows unauthenticated attackers to upload limited file types,...