PoC Index85,092 CVEs with PoCs

CVE-2023-4666

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

CRITICAL 9.8EPSS 3.8%

The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE

Affected
Form Maker by 10Web
CVSS v3.1 NVD
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
3.78% chance of exploitation in the next 30 days, 90th percentile
Published
2023-10-16
Updated
2025-04-23

Proof-of-concept exploits (2)

References

Related