https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:03:59.113239+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-12427 CVE-2024-12427 — Multi Step Form <= 1.7.23 - Missing Authorization to Unauthenticated Limited File Upload 2026-10-07T00:03:59.114785+00:00

Affected: mondula2016 Multi Step Form

The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJAX action in all versions up to, and including, 1.7.23. This makes it possible for unauthenticated attackers to upload limited file types such as images.