Description
WordPress Plugin MW WP Form is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin MW WP Form version 4.4.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 4.4.3 or latest
References
Related Vulnerabilities
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-4962)
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2018-16890)
Internet Information Services Integer Overflow or Wraparound Vulnerability (CVE-2008-1446)
WordPress Plugin Copy or Move Comments Multiple Vulnerabilities (1.0.0)
WordPress 4.5.x Same Origin Method Execution (SOME) Vulnerability (4.5 - 4.5.1)