Directory Traversal Vulnerability in MW WP Form by MW WP Form Corp

CVE-2023-28408

Summary

A directory traversal vulnerability exists in MW WP Form versions v4.4.2 and earlier, allowing a remote unauthenticated attacker to gain unauthorized access to sensitive data or manipulate the web application. This flaw can lead to serious consequences, including website alterations and potential denial-of-service (DoS) conditions based on the application's configuration.

References