WordPress security by component

Multi Purpose Mail Form

Plugin description

Multi Purpose Mail Form is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Nov 04, 2024; the highest CVE/CNA score is 10.

Plugin slug: multi-purpose-mail-form

Latest vulnerability

CVE-2024-50526: Multi Purpose Mail Form: Dangerous file upload

Multi Purpose Mail Form is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PublishedNov 04, 2024

Safe version guidanceSee mitigation notes

		Safe version
Nov 04, 2024	CVE-2024-50526 Multi Purpose Mail Form: Dangerous file upload Multi Purpose Mail Form is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.	See mitigation notes	CVE10.0 NVD9.8
Oct 29, 2024	CVE-2024-50484 Multi Purpose Mail Form: Dangerous file upload Multi Purpose Mail Form is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.	See mitigation notes	CVE10.0 NVDPending