CVE-2023-46206

The MW WP Form plugin before version 5.0.0 contains a broken access control vulnerability that was discovered by Revan Arifio. An attacker without proper privileges could exploit missing authorization, authentication, or nonce verification checks to perform actions that should be restricted to higher-privileged users. This flaw has been remedied in version 5.0.0 and users should upgrade immediately to address the issue.

Based on public CVE data (MITRE/NVD).