CVE-2023-28409 — Monkey Wrench Inc. / MW WP Form

CVE-2023-28409

Monkey Wrench Inc. / MW WP Form PUBLISHED

Description (CNA)

Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file.

Affected (CNA)

Vendor / product	Versions
Monkey Wrench Inc. / MW WP Form	affected versions v4.4.2 and earlier

CWE

No CWE identifiers supplied.

References

https://plugins.2inc.org/mw-wp-form/blog/2023/05/08/752/
https://jvn.jp/en/jp/JVN01093915/

ADP enrichment

CVE

No English description supplied.

https://plugins.2inc.org/mw-wp-form/blog/2023/05/08/752/
https://jvn.jp/en/jp/JVN01093915/

CISA-ADP

No English description supplied.

No references supplied.