Monkey Wrench Inc. MW WP Form

• CVE-2023-28409 Critical 9.8 Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file. 1.2%
• CVE-2023-28408 Critical 9.8 Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website or cause a denial-of-service (DoS) condition, and obtain sensi 1.8%