Lucene search

K
wpvulndbWpvulndbWPVDB-ID:7F584E8E-1166-43CD-8762-C76D648B3A08
HistoryDec 04, 2023 - 12:00 a.m.

MW WP Form < 5.0.2 - Unauthenticated Arbitrary File Upload

2023-12-0400:00:00
wpscan.com
8
mw wp form
unauthenticated
arbitrary file upload
plugin
server

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%

Description The plugin does not properly handle unauthorised files from being uploaded, only logging the issue without stopping the process, allowing unauthenticated users to upload arbitrary files to the server when the ‘Saving inquiry data in database’ settings is enabled in the plugin

CPENameOperatorVersion
eq5.0.2

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%

Related for WPVDB-ID:7F584E8E-1166-43CD-8762-C76D648B3A08