What’s Vulnerable › Products

Mondula GmbH Multi Step Form vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Mondula GmbH Multi Step Form version is affected

Latest Mondula GmbH Multi Step Form vulnerabilities

• CVE-2025-9515 — Multi Step Form <= 1.7.25 - Authenticated (Admin+) Arbitrary File Upload (CVSS 7.2)
• CVE-2024-12427 — Multi Step Form <= 1.7.23 - Missing Authorization to Unauthenticated Limited File Upload (CVSS 5.3)
• CVE-2024-50428 — WordPress Multi Step Form plugin <= 1.7.21 - Broken Access Control vulnerability (CVSS 9.8)
• CVE-2024-25905 — WordPress Multi Step Form Plugin <= 1.7.18 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)
• CVE-2023-50832 — WordPress Multi Step Form Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
• CVE-2023-47758 — WordPress Multi Step Form Plugin <= 1.7.11 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2022-4196 — Multi Step Form < 1.7.8 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2018-14846 — (CVSS 5.4)
• CVE-2018-14430 — (CVSS 6.1)