Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-4666

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Form Maker by 10Web

Default version status: unaffected

  • 0 to < 1.15.20affected

References