CVE-2018-14430

The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fw_data [id][1], fw_data [id][2], fw_data [id][3], fw_data [id][4], or email field of the contact form, exploitable with an fw_send_email action to wp-admin/admin-ajax.php.

• CWE-79

• https://hackpuntes.com/cve-2018-14430-wordpress-plugin-multi-step-form-125-multiples-xss-reflejados/Exploit, Issue Tracking, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/9106Exploit, Third Party Advisory
• https://hackpuntes.com/cve-2018-14430-wordpress-plugin-multi-step-form-125-multiples-xss-reflejados/Exploit, Issue Tracking, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/9106Exploit, Third Party Advisory

Published

Jul 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14422blog/index.php in SansCMS 0.7 has XSS via the q parameter.
• CVE-2018-14423Division-by-zero vulnerabilities in the functions pi_next_pc…
• CVE-2018-14424The daemon in GDM through 3.29.1 does not properly unexport …
• CVE-2018-14425There is a Persistent XSS vulnerability in the briefcase com…
• CVE-2018-14429man-cgi before 1.16 allows Local File Inclusion via absolute…
• CVE-2018-1443An XML parsing vulnerability affects IBM SAML-based single s…5.9
• CVE-2018-14432In the Federation component of OpenStack Keystone before 11.…
• CVE-2018-14434ImageMagick 7.0.8-4 has a memory leak for a colormap in Writ…
• CVE-2018-14435ImageMagick 7.0.8-4 has a memory leak in DecodeImage in code…
• CVE-2018-14436ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in co…
• CVE-2018-14437ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders…
• CVE-2018-14438In Wireshark through 2.6.2, the create_app_running_mutex fun…