Mondula Multi Step Form any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs

CVE-2024-50428

WordPress Multi Step Form plugin <= 1.7.21 - Broken Access Control vulnerability

Published 2024-10-29 · Modified

9.8EPSS 0.003

CVE-2023-47758

WordPress Multi Step Form Plugin <= 1.7.11 is vulnerable to Cross Site Request Forgery (CSRF)

Published 2023-11-22 · Modified

8.8EPSS 0.003

CVE-2018-14430

The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fw_data [id][1], fw_data [id][2], fw_data [id][3], fw_data [id][4], or email field of the contact form, exploitable with an fw_send_email action to wp-admin/admin-ajax.php.

Published 2018-07-25 · Modified

6.1EPSS 0.013

CVE-2023-50832

WordPress Multi Step Form Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)

Published 2023-12-21 · Modified

5.9EPSS 0.004

CVE-2018-14846

The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php.

Published 2018-12-20 · Modified

5.4EPSS 0.011

CVE-2024-25905

WordPress Multi Step Form Plugin <= 1.7.18 is vulnerable to Cross Site Request Forgery (CSRF)