MW WP Form WordPress Plugin Information Exposure Vulnerability

A vulnerability allowing information exposure exists in the MW WP Form plugin for WordPress, affecting all versions through 5.1.2. The issue arises from the '_get_post_property_from_querystring()' function, which lacks proper restrictions on post accessibility. This flaw enables unauthenticated attackers to retrieve data from password-protected, private, or draft posts that should otherwise be inaccessible.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from protected WordPress posts.

Remediation

Users can update to MW WP Form version 5.1.3 or later to address this vulnerability.