MW WP Form

Explore MW WP Form vulnerabilities across all versions. Currently tracking 10 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all MW WP Form vulnerabilities before they are exploited.

Vulnerability Records

10 records


2026-06-09 18:48	MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter MW WP Form <= 5.1.3	`CVE-2026-8853`	4.4 Medium	Sérgio Charruadas (itzvenom)	Yes
2026-06-01 00:00	MW WP Form <= 5.1.3 - Unauthenticated Stored Cross-Site Scripting MW WP Form <= 5.1.3	`CVE-2026-48871`	7.2 High	VanTastic	Yes
2026-05-13 19:51	MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter MW WP Form <= 5.1.2	`CVE-2026-6206`	5.3 Medium	alex_henry20	Yes
2026-04-08 07:57	MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys MW WP Form <= 5.1.1	`CVE-2026-5436`	8.1 High	Sander Horsman	Yes
2026-04-01 16:50	MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir MW WP Form <= 5.1.0	`CVE-2026-4347`	8.1 High	ISMAILSHADOW	Yes
2024-01-31 00:00	MW WP Form <= 5.0.6 - Authenticated (Editor+) Stored Cross-Site Scripting MW WP Form <= 5.0.6	`CVE-2024-24804`	5.5 Medium	Huynh Tien Si	Yes
2023-12-15 00:00	MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion MW WP Form <= 5.0.3	`CVE-2023-6559`	7.5 High	Thomas Sanzey	Yes
2023-12-04 00:00	MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload MW WP Form <= 5.0.1	`CVE-2023-6316`	9.8 Critical	István Márton	Yes
2023-10-19 00:00	MW WP Form <= 4.4.5 - Missing Authorization MW WP Form <= 4.4.5	`CVE-2023-46206`	5.3 Medium	Revan Arifio	Yes
2023-05-08 00:00	MW WP Form <= 4.4.2 - Directory Traversal via _file_upload MW WP Form < 4.4.3	`CVE-2023-28409`	5.3 Medium	Shuya Ota	Yes

Showing 1–10 of 10 reports

Latestv5.1.4

MW WP Form

Author

Webの相談所

4.2(23)

84/100

Last Updated

2026-05-24 (2mo ago)

Active Installs

200,000+

Downloads

1,912,687

Requires WP

6.0+

Requires PHP

8.0+

Tested up to

WP 6.4.8

Created

2012-12-17 (14y ago)

This plugin currently has only the minimum required maintenance releases. Main maintainer has been handed over from @inc2734 to @websoudan. MW WP Form can create mail form with a confirmation screen using shortcode. Form created using shortcodes Using confirmation page is possible. The page changes by the same URL or individual URL are possible. Many validation rules Saving inquiry data is possible. Displaying Chart using saved inquiry data is possible. Official https://mw-wp-form.web-soudan.co.jp GitHub https://github.com/web-soudan/mw-wp-form The following third-party resources Google Charts Source: https://developers.google.com/chart/ Contributors Takashi Kitajima ( inc2734 ) Ryujiro Yamamoto ( ryu263 ) Tsujimoto Tomoyuki ( tomothumb ) [Naoyuki Ohata] ( nanniku ) Kazuto Takeshita ( moto hachi ) Atsushi Ando ( NExt-Season ) Kazuki Tomiyasu ( KUCKLU ) Kei Nomura ( mypacecreator ) mh35 Takashi Nojima herikutu tsucharoku Tetsuaki Hamano ( t-hamano ) Susumu Seino ( Susumu Seino ) Yosuke Onoue ( likr ) Yudai Konishi ( Yudai Konishi ) takekoshi ( takekoshi )

View on WordPress.org