Unrated severityNVD Advisory· Published May 23, 2023· Updated Jan 31, 2025

CVE-2023-28409

Description

Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Mw Wp Formllm-fuzzy
Range: <=4.4.2
Package: https://wordpress.org/plugins/mw-wp-form
Mw Wp Form Project/Mw Wp Formv5
Range: versions v4.4.2 and earlier

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN01093915/mitre
plugins.2inc.org/mw-wp-form/blog/2023/05/08/752/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000