https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 08:28:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08947 bdu:2023-08947 https://cve.radiocsirt.org/vuln/bdu:2023-08947 https://cve.radiocsirt.org/vuln/euvd-2026-287405 EUVD-2026-287405 https://cve.radiocsirt.org/vuln/euvd-2026-287405 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6316 <p>The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the &#39;_single_file_upload&#39; function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> <p>The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the &#39;_single_file_upload&#39; function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6316 https://cve.radiocsirt.org/vuln/ghsa-3w6w-q6rh-xhgj <p>The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the &#39;_single_file_upload&#39; function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> <p>The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the &#39;_single_file_upload&#39; function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> https://cve.radiocsirt.org/vuln/ghsa-3w6w-q6rh-xhgj https://cve.radiocsirt.org/vuln/gsd-2023-6316 gsd-2023-6316 https://cve.radiocsirt.org/vuln/gsd-2023-6316 https://cve.radiocsirt.org/vuln/jvndb-2023-012042 <p>WordPress plugin &#34;MW WP Form&#34; provided by Web Consultation Office Co., Ltd can create a mail form using shortcode. MW WP Form contains a vulnerability that may allow an attacker to upload arbitrary files (CVE-2023-6316, CWE-434).</p> <p>WordPress plugin &#34;MW WP Form&#34; provided by Web Consultation Office Co., Ltd can create a mail form using shortcode. MW WP Form contains a vulnerability that may allow an attacker to upload arbitrary files (CVE-2023-6316, CWE-434).</p> https://cve.radiocsirt.org/vuln/jvndb-2023-012042