CVE-2023-28409

概要

参考情報

• jvn.jp/en/jp/JVN01093915 · Third Party Advisory
• plugins.2inc.org/mw-wp-form/blog/2023/05/08/752 · Vendor Advisory

mw wp form のその他の脆弱性

• CVE-2023-6316緊急 9.8The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_up…
• CVE-2023-28408緊急 9.8Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website or…