Количество 3
Количество 3
CVE-2023-6316
The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
GHSA-3w6w-q6rh-xhgj
The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
BDU:2023-08947
Уязвимость функции _single_file_upload() плагина MW WP Form (mw-wp-form) системы управления содержимым сайта WordPress, позволяющая нарушителю загружать произвольные файлы и выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-6316 The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. | CVSS3: 9.8 | 8% Низкий | около 2 лет назад |
| GHSA-3w6w-q6rh-xhgj The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. | CVSS3: 9.8 | 8% Низкий | около 2 лет назад |
 | BDU:2023-08947 Уязвимость функции _single_file_upload() плагина MW WP Form (mw-wp-form) системы управления содержимым сайта WordPress, позволяющая нарушителю загружать произвольные файлы и выполнить произвольный код | CVSS3: 9.8 | 8% Низкий | около 2 лет назад |
Уязвимостей на страницу