CVE-2023-28408 — Monkey Wrench Inc. / MW WP Form

Description (CNA)

Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website or cause a denial-of-service (DoS) condition, and obtain sensitive information depending on settings.

Affected (CNA)

Vendor / product	Versions
Monkey Wrench Inc. / MW WP Form	affected versions v4.4.2 and earlier

CWE

No CWE identifiers supplied.

References

https://plugins.2inc.org/mw-wp-form/blog/2023/05/08/752/
https://jvn.jp/en/jp/JVN01093915/

ADP enrichment

CVE

No English description supplied.

https://plugins.2inc.org/mw-wp-form/blog/2023/05/08/752/
https://jvn.jp/en/jp/JVN01093915/

CISA-ADP

No English description supplied.

No references supplied.