https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T08:28:42.920142+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08947 bdu:2023-08947 2026-10-09T08:28:42.923700+00:00 bdu:2023-08947 https://cve.radiocsirt.org/vuln/euvd-2026-287405 EUVD-2026-287405 2026-10-09T08:28:42.923732+00:00 EUVD-2026-287405 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6316 fkie_cve-2023-6316 2026-10-09T08:28:42.923746+00:00

The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

 https://cve.radiocsirt.org/vuln/ghsa-3w6w-q6rh-xhgj GHSA-3w6w-q6rh-xhgj 2026-10-09T08:28:42.923775+00:00

The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

 https://cve.radiocsirt.org/vuln/gsd-2023-6316 gsd-2023-6316 2026-10-09T08:28:42.923792+00:00 gsd-2023-6316 https://cve.radiocsirt.org/vuln/jvndb-2023-012042 jvndb-2023-012042 2026-10-09T08:28:42.923804+00:00

WordPress plugin "MW WP Form" provided by Web Consultation Office Co., Ltd can create a mail form using shortcode. MW WP Form contains a vulnerability that may allow an attacker to upload arbitrary files (CVE-2023-6316, CWE-434).