Plugin icon

Multi Step Form

multi-step-form

Vulnerabilities:

9

Last Updated:

November 24, 2025

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-09-05
Title
Multi Step Form < 1.7.26 - Authenticated (Admin+) Arbitrary File Upload
Fixed in
Fixed in 1.7.26
CVSS
7.2 (high)
Published
2025-01-15
Title
Multi Step Form < 1.7.24 - Missing Authorization to Unauthenticated Limited File Upload
Fixed in
Fixed in 1.7.24
CVSS
5.3 (medium)
Published
2024-10-24
Title
Multi Step Form < 1.7.22 - Missing Authorization via fw_delete_files
Fixed in
Fixed in 1.7.22
CVSS
5.3 (medium)
Published
2024-02-12
Title
Multi Step Form < 1.7.19 - Form Deletion via CSRF
Fixed in
Fixed in 1.7.19
CVSS
4.3 (medium)
Published
2023-12-19
Title
Multi Step Form < 1.7.17 - Admin+ Stored XSS
Fixed in
Fixed in 1.7.17
CVSS
3.5 (low)
Published
2023-11-13
Title
Multi Step Form < 1.7.13 - Form Update/Deletion via CSRF
Fixed in
Fixed in 1.7.13
CVSS
4.3 (medium)
Published
2022-12-17
Title
Multi Step Form < 1.7.8 - Admin+ Stored XSS
Fixed in
Fixed in 1.7.8
CVSS
3.4 (low)
Published
2018-10-31
Title
Multi Step Form <= 1.2.5 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.2.6
CVSS
5.4 (medium)
Published
2018-07-20
Title
Multi Step Form <= 1.2.5 - Multiple Unauthenticated Reflected XSS
Fixed in
Fixed in 1.2.6
CVSS
6.1 (medium)