Unrated severityNVD Advisory· Published May 23, 2023· Updated Jan 31, 2025

CVE-2023-28409

Description

Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file.

Affected products

Monkey Project/Mw Wp Formv5
Range: versions v4.4.2 and earlier

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

jvn.jp/en/jp/JVN01093915/mitre
plugins.2inc.org/mw-wp-form/blog/2023/05/08/752/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000