N/A
2026-01-27< 12.0.4
Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path Traversal
Minimum safe version
12.0.4
Update to 12.0.4 or later to address 6 fixable vulnerabilities
Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path Traversal
CVE-2023-28408
CVE-2023-32623
CVE-2023-28413
WordPress Snow Monkey Forms Plugin <= 5.0.6 is vulnerable to Directory Traversal
Snow Monkey Forms <= 5.1.1 - Directory Traversal via 'view' REST endpiont