What’s Vulnerable › Products

websoudan MW WP Form vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your websoudan MW WP Form version is affected

Latest websoudan MW WP Form vulnerabilities

• CVE-2026-92086 — MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameter (CVSS 5.3)
• CVE-2026-96567 — MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta) (CVSS 7.2)
• CVE-2026-8853 — MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter (CVSS 4.4)
• CVE-2026-6206 — MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter (CVSS 5.3)
• CVE-2024-24804 — WordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2023-6559 — MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion (CVSS 9.8)