MMonkey Wrench Inc.

Products

Exploited and recent CVEs

• CVE-2023-32623 Unrated Directory traversal vulnerability in Snow Monkey Forms v5.1.1 and earlier allows a remote unauthenticated attacker to delete arbitrary files on the server. 1.5%
• CVE-2023-28409 Critical 9.8 Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file. 1.2%
• CVE-2023-28408 Critical 9.8 Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website or cause a denial-of-service (DoS) condition, and obtain sensi 1.8%
• CVE-2023-28413 Critical 9.8 Directory traversal vulnerability in Snow Monkey Forms versions v5.0.6 and earlier allows a remote unauthenticated attacker to obtain sensitive information, alter the website, or cause a denial-of-ser 2.0%