Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Multi Step Form MEDIUM 5.3

CVE-2024-12427

The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJ…

Fix: 1.7.24+

Fix from $1,600 2025-01-16

Multi Step Form CRITICAL 9.8

CVE-2024-50428

Missing Authorization vulnerability in mondula2016 Multi Step Form multi-step-form allows Exploiting Incorrectly Configured Access Control Security L…

Fix: 1.7.22+

Fix from $2,300 2024-10-29

Multi Step Form MEDIUM 5.4

CVE-2024-25905

Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form.This issue affects Multi Step Form: from n/a through 1.7.18.

Fix: 1.7.19+

Fix from $1,600 2024-02-21

Multi Step Form HIGH 8.8

CVE-2023-47758

Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form plugin <= 1.7.11 versions.

Fix: 1.7.11+

Fix from $1,950 2023-11-22

Multi Step Form MEDIUM 5.4

CVE-2018-14846

The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php.

Fix: 1.2.8+

Fix from $1,600 2018-12-20

Multi Step Form MEDIUM 6.1

CVE-2018-14430

The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fw_data [id][1], fw_data [id][2], fw_data [id][3], fw_data [id][4],…

Fix: after 1.2.5

Fix from $1,600 2018-07-25