CVE Database /
CVE-2023-6559
CVE · Critical
CVE-2023-6559 — MW WP Form [mw-wp-form] < 5.0.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-6559
|
MW WP Form [mw-wp-form] < 5.0.4 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
Critical
9.8
|
< 5.0.4
|
5.0.4 |
2023-12-15 |
—
|
CVE-2023-6559
The MW WP Form plugin versions prior to 5.0.4 contain an arbitrary file deletion flaw that was discovered by Thomas Sanzey. An attacker could exploit this vulnerability to remove files from an affected website, potentially destroying critical system files and rendering the site inoperational. The vulnerability has been resolved in version 5.0.4 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings