Return-Path: <1axbm3ffmgwovs5xfw3csw30pta78v8t3wluoi-help=rommedia.eu@4354010m.wordfence.com>
Delivered-To: help@rommedia.eu
Received: from web05.ouiheberg.com
	by web05.ouiheberg.com with LMTP
	id lS4MGeLxbWVfKBkAw70cEg
	(envelope-from <1axbm3ffmgwovs5xfw3csw30pta78v8t3wluoi-help=rommedia.eu@4354010m.wordfence.com>)
	for <help@rommedia.eu>; Mon, 04 Dec 2023 16:36:02 +0100
Return-path: <1axbm3ffmgwovs5xfw3csw30pta78v8t3wluoi-help=rommedia.eu@4354010m.wordfence.com>
Envelope-to: help@rommedia.eu
Delivery-date: Mon, 04 Dec 2023 16:36:02 +0100
Received: from bid458m.4354010m.wordfence.com ([158.247.16.68]:11073)
	by web05.ouiheberg.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.96.2)
	(envelope-from <1axbm3ffmgwovs5xfw3csw30pta78v8t3wluoi-help=rommedia.eu@4354010m.wordfence.com>)
	id 1rAAzE-006urj-0F
	for help@rommedia.eu;
	Mon, 04 Dec 2023 16:36:02 +0100
Received: by 172.16.227.89 with SMTP id aybpbz3a1zmnbriqtzljpuk8dpz4sfnkctb0ywm9;
        Mon, 4 Dec 2023 15:35:19 GMT
DKIM-Signature: v=1; s=hs2; d=4354010m.wordfence.com; 
        i=@4354010m.wordfence.com; 
        h=sender:from:from:reply-to:to:to:cc:cc:subject:subject:list-unsubscribe:form-sub:feedback-id; 
        a=rsa-sha256; c=relaxed/relaxed; 
        bh=L6IYKsGNeMfeOBxPYtCrd7Yn3hAystiuuHKBYLyomic=; 
        b=cLvCFqpE3dRDMJL+vEOIOakvyBW+zTnAJQORgZMaslGUx9+T1PyaCmcvvKNZVl
         SEYoTU9jYqqa6UtA+rGzPtSjWzhYoABJFu2eGcDfX1ngFyJmqaYWg3vF1NhStFZ
         j3hWwNREOyGodgyu7edVs3D7jdclPMjKtK7GULhLzO31OPpmv4bjWTb74x9/p8Z
         XVw2cCXdhoCxZ54UNZnA9zuiXJhAQn7anhyOi6my9x9n+isw6aEbj7XJzL/1Oiw
         0b1yGYgdCU15OP8qoGmju3fOvevwuCV6dv3CmHh8fhjewxQx/eJ7fWPFfB1uIy4
         3R33p3CeRwYUFRLocVVEIaFhDbIg==; q=dns/txt; t=1701704119; 
        x=1701966919;
DKIM-Signature: v=1; s=hs2; d=wordfence.com; i=@wordfence.com; 
        h=sender:from:from:reply-to:to:to:cc:cc:subject:subject:list-unsubscribe:form-sub:feedback-id; 
        a=rsa-sha256; c=relaxed/relaxed; 
        bh=L6IYKsGNeMfeOBxPYtCrd7Yn3hAystiuuHKBYLyomic=; 
        b=eg6uXj0cNO7jxjOHOk4KzYY9EU1Vbhdw/qkaAIlBEY5Lmw+jnZ+IiScwUArmYX
         Fe0VUbyTgTicRx6WbWGbqOaB8UEzVrRCLfoGC5ITujfQ5DX4jglIRZ7s93gK9CO
         yacKMzsuEbFzhtVJwhll1UUoZcQ9PxUO6uTThbuztT4N3PPCNG3JGiTVExSSvx/
         NPG0bHLQcl8h9kdIpl9EBzYXX0PBLAvGaRi+rBYJUAO5anJSr5kjPT3lUnd+Gu6
         IfgZT4ciCrysF5juLDsAxImJvQxyNCJGvgWfuCC48r4M0fX9joto5aY8dB8FZOF
         TSb0wjFQvt7d4pmm5N0CzkVheNGA==; q=dns/txt; t=1701704119; 
        x=1701966919;
X-HS-Cid: 1axff141ihv0lx8dmmh1lu7btyflzupyo1ag66
List-Unsubscribe: <mailto:1axcpuz2fgs550oj0cgld1g0x4g6l1s28qvo1u-help=rommedia.eu@4354010m.wordfence.com?subject=unsubscribe>
Date: Mon, 4 Dec 2023 07:35:19 -0800
From: Wordfence <list@wordfence.com>
Reply-To: no-reply@wordfence.com
To: help@rommedia.eu
Message-ID: <1701702794719.8f6110eb-293c-4aa5-9092-bf0bae612aa8@4354010m.wordfence.com>
Subject: [WordPress Security] Update ASAP! Critical Unauthenticated
 Arbitrary File Upload in MW WP Form Allows Malicious Code Execution
MIME-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_11119761_1383759079.1701704118381"
X-Report-Abuse-To: abuse@hubspot.com (see
 https://policy.hubspot.com/abuse-complaints)
X-Spam-Status: No, score=-0.2
X-Spam-Score: -1
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "web05.ouiheberg.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Arbitrary File Uploads allowed through vulnerability in MW
    WP Form WordPress Plugin. Wordfence-Logo.png (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3H3prCCW6N1vHY6lZ3p-VjnSBR9hytrzW424Ns96Ydrg8W6gdRjL5Jv6M9W6xtRj089cwLnN1vGYkwltYg1W5kV
    [...] 
 Content analysis details:   (-0.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked due to usage
                             of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URIs: wordfence.com]
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query
                              to zen.spamhaus.org was blocked due to
                             usage of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [158.247.16.68 listed in zen.spamhaus.org]
  0.0 URIBL_ZEN_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage
                             of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URIs: wordfence.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
 -0.0 DKIMWL_WL_HIGH         DKIMwl.org - High trust sender
X-Spam-Flag: NO

------=_Part_11119761_1383759079.1701704118381
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Arbitrary File Uploads allowed through vulnerability in MW WP Form WordPres=
s Plugin.

Wordfence-Logo.png (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsP=
tF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3H3prCCW6N1vHY6lZ3p-VjnSBR9hytrzW424N=
s96Ydrg8W6gdRjL5Jv6M9W6xtRj089cwLnN1vGYkwltYg1W5kV-1r3HKr4TW1Xh6s52_Q_FbVwS=
YP31H7hSfW3t5SQv57-wY7W2zXqfG2nl6ZMW3JT57b4x0ZQjW7mSkd84qG1mjMMWH423cq4XN3P=
ccYVNqK6sN7SF-FC1lD5MW6yV0cC4S-yFgW71LHv06qkcTmVl-Y3h2p2Q0qW2xzM6G6lPlm2Mtd=
C01pyyPGW4SJYYg210b8NN5yxl2SQN5Nbf26ZvfY04 )

FeaturedImage_Wordfence_56.03 (https://email.wordfence.com/e3t/Ctc/GC+113/c=
wG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3H5m_5PW6N1X8z6lZ3kVW88BkY=
72p7b5RW3XWb--6ZqxkCW6D0YkD4L8zTFVNJN1C1W5z3MW51v6fh47ccZ6W2_TXNQ3N0RSsW8tx=
JXw2lXlQ1W7gFDd15m-2kLW86gBgz407ndCW4B98_x1_l9BKW6jW4QW8JNcbSW6D2WvY76MyyMW=
6kMBFZ25wlqxW4_qQ7Q3HTxkyW1t7F5T6r6tbSW1D_qm27sc39fV92X177yy88nW2zJgLN8N7zJ=
lW1Zn0wh2340ZQW7PfB5Z5fgc9ZN8VcwhXF0d7xW4rV2q84XXnmyW8nZ-DM62fpf1W8DnckM7fY=
NQSW6Wn2Rq93J_cPW3PybRW3xjGbrN23_75c-fxF3W3R0b4068SrndV3wzXF8XCCVYW1x7D2Z7Y=
gpVwW1ck2SC5qxNGxW1QtFCk7blpsyW1V6Bv723bt-1N9j3MtNryzmzN25ZVbRJwDrjW4f0f3j5=
W27klW7cQMFM76QBgQW6FlzwH2GtpQkf5qgFW804 )

On November 24, 2023, the Wordfence Threat Intelligence team identified and=
 began the responsible disclosure process for an Unauthenticated Arbitrary =
File Upload vulnerability in MW WP Form plugin, which is actively installed=
 on more than 200,000 WordPress websites. This vulnerability makes it possi=
ble for an unauthenticated attacker to upload arbitrary files, including PH=
P files, and achieve remote code execution on a vulnerable site=E2=80=99s s=
erver when the =E2=80=9CSaving inquiry data in database=E2=80=9D option in =
the form settings is enabled.

All Wordfence Premium (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/V=
WsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3prCCW7Y8-PT6lZ3m2V70wn777YXt-W5=
1x2h_6cGvXMW3TH1gQ6XC4t3VrKg8j1mtgWpW7HmKZY27bLj2W6htG_S5Bww7QW5RJYL16-YSF4=
W3W6L847X9zRQW9hwrkN4bBJfWW7vMM4Z80WbDRW3m5pZp3FsXcrW3ZWl991pjcwBW6kBNZ42cN=
YxLW6C1lc78Jgrc2W1NXBP51Mpy1XW6N1jHT1SpLpLW2dCYWT5p_qb-W1LQ-jH90Bc_yW2fMhf4=
2lP_QjMYhxgJcHCqBW6-R1wb86dgdJW7nGkk52L58GMW63ZCRK5jSwqVW5m4TKl6FHb3XW40LMK=
Z4z-cH3W3hSQh_9gjyr5f1lQcmP04 ) , Wordfence Care (https://email.wordfence.c=
om/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3prCC=
W7Y8-PT6lZ3nDW7sTys88QmF6DW4-4rjl3d_lcYW3RfLnJ21dC28N89RWKLd7XKCW30v6TC57rh=
m2W39xrNV3rRlYnW70nTHl2wDfmQW6jd9B7312qRLW3MqfTj4_VBsyW6WqzZZ2237VpW3VL2KQ3=
fs9fbW5gppQF4sjT0VN9hFyVMDyp2CW1svXl55NQmJ-W75ksrZ5PrLnDW34b5CR1RrS5-W8sRnz=
D1vNW_SW4CT_wS3td0l8N36XxjN7cq4PW8Jgv-F1khz0lW8JT0Kp4njm8gW8Qblwg3G_52QW1n_=
Q482hmrPrW7T7dQT2yTHqYW5-4v0g1nL-ynW1HMpb_7h5x5ff4fKqz-04 ) , and Wordfence=
 Response (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N=
62HkhXr2BGdW67tPB756FKqkN880g4g3prCCW7Y8-PT6lZ3kVW4Fy6h29kq4X4MjRPYL-hFQPW3=
2P_5m3GQmY_W3F2K_18B155xW12z2wC8H5pmRW95nwLv8N_LhdW4XB16V3wgFkHN7lHmMtg7ss_=
W5XTFgm3bS2nSW2YD1JW5B_t8tW1X78st9bDDw8W3xXGzL1l57flW6tNnFW1-6XzPW2_CQP-6YC=
90RW3TWyC21K6ppxW3vJl_b8f7qKlW785kM87hm9XzW52rYWd7vZp_TW5NyC6M4YQ9VWW68y8St=
1kKyxdW20GpPX6dkBPgW4x8ncL3rKx9BW6MCRKJ6V3_JVT_ttH1rVLSCW66Tzjh15dnPtVxMN89=
3Sy-J6f2ykKJY04 ) customers, as well as those still using the free version =
of our plugin, are protected against any exploits targeting this vulnerabil=
ity by the Wordfence firewall=E2=80=99s built-in Malicious File Upload prot=
ection.

We contacted the Web-Soudan Team on November 24, 2023, and received a respo=
nse the same day. After providing full disclosure details, the developer re=
leased a patch on November 29, 2023. We would like to commend The Web-Souda=
n Team for their prompt response and timely patch.

We urge users to update their sites with the latest patched version of MW W=
P Form, which is version 5.0.2 at the time of this writing, as soon as poss=
ible.

CONTINUE READING ON THE BLOG
(https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BG=
dW67tPB756FKqkN880g3H5m_5PW6N1X8z6lZ3kVW88BkY72p7b5RW3XWb--6ZqxkCW6D0YkD4L8=
zTFVNJN1C1W5z3MW51v6fh47ccZ6W2_TXNQ3N0RSsW8txJXw2lXlQ1W7gFDd15m-2kLW86gBgz4=
07ndCW4B98_x1_l9BKW6jW4QW8JNcbSW6D2WvY76MyyMW6kMBFZ25wlqxW4_qQ7Q3HTxkyW1t7F=
5T6r6tbSW1D_qm27sc39fV92X177yy88nW2zJgLN8N7zJlW1Zn0wh2340ZQW7PfB5Z5fgc9ZN8V=
cwhXF0d7xW4rV2q84XXnmyW8nZ-DM62fpf1W8DnckM7fYNQSW6Wn2Rq93J_cPW3PybRW3xjGbrN=
23_75c-fxF3W3R0b4068SrndV3wzXF8XCCVYW1x7D2Z7YgpVwW1ck2SC5qxNGxW1QtFCk7blpsy=
W1V6Bv723bt-1N9j3MtNryzmzN25ZVbRJwDrjW4f0f3j5W27klW7cQMFM76QBgQW6FlzwH2GtpQ=
kf5qgFW804 )

Vulnerability Summary from Wordfence Intelligence

Description: MW WP Form <=3D 5.0.1 =E2=80=93 Unauthenticated Arbitrary File=
 Upload (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62=
HkhXr2BGdW67tPB756FKqkN880g3n5m_5PW69t95C6lZ3n5W3h0VZ36hGymwW6365Rq4zq0hXW1=
TDBx73jkQ1NW6CmCrz3N8VYjW8XmFyB733QrGW6V-GXX2CsKj-N77fv8jkM_4GW3bKBxD730SBj=
W49CzTm4wKnYHW1-B0k_87r4ftW5w7Jzr7s1bcFW33qtNg5MGZnrW19FQFv1JvQyhN8s5yf-Hpt=
tBW3gJxJ87NN3zxW9bF-2l43pr3-W45NhMT8d7RbLW7w9Kp48fQZHlW684YBh6ZHGRxW5B4Flt5=
zD9GDW2Mtv921Bk3LjW5fPSGD3nLPtVW1B-2df3nc7SjW6pZzBm7lwJ7TW1z5zv98BZmbBW8-g0=
mT2rLgy7W4FkM3N3smwv9W73wlpr3SFywcW5tn0VT1dBZrSW7ttnGP8Nq3hwW328Ymp8Z-hYGVq=
x2P22mycqHN69dYN59S0yJW85G2l22kp2qpW3YJ9SN1z13M3W5f-Q8186MfQ1dBsn-804 )

Affected Plugin: MW WP Form

Plugin Slug: mw-wp-form

Affected Versions: <=3D 5.0.1

CVE ID: CVE-2023-6316

CVSS Score: 9.8 (Critical)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Researcher/s: Istv=C3=A1n M=C3=A1rton (https://email.wordfence.com/e3t/Ctc/=
GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4T3prCCW95jsWP6lZ3=
mWW7qblFX8Tjth2MS8jLXW9nRfW6pvBS-782KwQW2lZDyV30Ty-bW3PFThq4XVhWkN2Q4nPqHlL=
YWVkh38q8yC9rGW7lyQ0Y1z9K7CVLTXgW7sB2TTW1tgLNW8pGWBXW8jh4PZ1LHGNfW7hyQyt8Lk=
8T8W936PcF96RzwrW8TW41F51SHjjW20V52v1LWq5ZW57n0l5841Wt2W2JvQ8576KQnGW8j60Tq=
96hWhjW7xs0H95RszxrW8LXGbk1Y0DMzW66mBpp4p3n_BW8RCrM61P0YxkW5-T9cg1VYv9qW6pl=
q6r2ZVn1mW5F9-hJ7hmkHBW5d1vLc4YFLJ_W5ZLbSh8RgH_fW3C3LpS3DjwgGV2XzbN95fM-5W2=
GSXJc1tR3kLf4Pxsr604 )

Fully Patched Version: 5.0.2

The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads=
 due to insufficient file type validation in the =E2=80=98_single_file_uplo=
ad=E2=80=99 function in versions up to, and including, 5.0.1. This makes it=
 possible for unauthenticated attackers to upload arbitrary files on the af=
fected site=E2=80=99s server which may make remote code execution possible.

Technical Analysis

The MW WP Form plugin provides a shortcode-based form builder, with many cu=
stomizable fields and many useful form options. Files can also be uploaded =
to the form with the [mwform_file name=3D"file"] shortcode field.

Examining the code reveals that the plugin uses the _single_file_upload() f=
unction in the MW_WP_Form_File class to file upload, and the check_file_typ=
e() function in the MWF_Functions class is used to check the file type.

[View the code snippet on the blog]  (https://email.wordfence.com/e3t/Ctc/G=
C+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3H5m_5PW6N1X8z6lZ3k=
VW88BkY72p7b5RW3XWb--6ZqxkCW6D0YkD4L8zTFVNJN1C1W5z3MW51v6fh47ccZ6W2_TXNQ3N0=
RSsW8txJXw2lXlQ1W7gFDd15m-2kLW86gBgz407ndCW4B98_x1_l9BKW6jW4QW8JNcbSW6D2WvY=
76MyyMW6kMBFZ25wlqxW4_qQ7Q3HTxkyW1t7F5T6r6tbSW1D_qm27sc39fV92X177yy88nW2zJg=
LN8N7zJlW1Zn0wh2340ZQW7PfB5Z5fgc9ZN8VcwhXF0d7xW4rV2q84XXnmyW8nZ-DM62fpf1W8D=
nckM7fYNQSW6Wn2Rq93J_cPW3PybRW3xjGbrN23_75c-fxF3W3R0b4068SrndV3wzXF8XCCVYW1=
x7D2Z7YgpVwW1ck2SC5qxNGxW1QtFCk7blpsyW1V6Bv723bt-1N9j3MtNryzmzN25ZVbRJwDrjW=
4f0f3j5W27klW7cQMFM76QBgQW6FlzwH2GtpQkf5qgFW804 )

The upload function checks the file and then copies it to the server with t=
he move_uploaded_file() function. The file is only stored on the server if =
the =E2=80=9CSaving inquiry data in database=E2=80=9D option is selected in=
 the form settings. Otherwise the file is immediately deleted after submitt=
ing the form.

[View the code snippet on the blog]  (https://email.wordfence.com/e3t/Ctc/G=
C+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3H5m_5PW6N1X8z6lZ3k=
VW88BkY72p7b5RW3XWb--6ZqxkCW6D0YkD4L8zTFVNJN1C1W5z3MW51v6fh47ccZ6W2_TXNQ3N0=
RSsW8txJXw2lXlQ1W7gFDd15m-2kLW86gBgz407ndCW4B98_x1_l9BKW6jW4QW8JNcbSW6D2WvY=
76MyyMW6kMBFZ25wlqxW4_qQ7Q3HTxkyW1t7F5T6r6tbSW1D_qm27sc39fV92X177yy88nW2zJg=
LN8N7zJlW1Zn0wh2340ZQW7PfB5Z5fgc9ZN8VcwhXF0d7xW4rV2q84XXnmyW8nZ-DM62fpf1W8D=
nckM7fYNQSW6Wn2Rq93J_cPW3PybRW3xjGbrN23_75c-fxF3W3R0b4068SrndV3wzXF8XCCVYW1=
x7D2Z7YgpVwW1ck2SC5qxNGxW1QtFCk7blpsyW1V6Bv723bt-1N9j3MtNryzmzN25ZVbRJwDrjW=
4f0f3j5W27klW7cQMFM76QBgQW6FlzwH2GtpQkf5qgFW804 )

Unfortunately, although the file type check function works perfectly and re=
turns false for dangerous file types, it throws a runtime exception in the =
try block if a disallowed file type is uploaded, which will be caught and h=
andled by the catch block. The catch block only uses the error_log() functi=
on to log the error without interrupting the upload. This means that even i=
f the dangerous file type is checked and detected, it is only logged, while=
 the function continues to run and the file is uploaded. This means that at=
tackers could upload arbitrary PHP files and then access those files to tri=
gger their execution on the server, achieving remote code execution.

We would like to draw attention once again to the fact that the vulnerabili=
ty only critically affects users who have enabled the =E2=80=9CSaving inqui=
ry data in database=E2=80=9D option in the form settings, because the plugi=
n only saves the files in this configuration.

Disclosure Timeline

November 24, 2023 =E2=80=93 Discovery of the Arbitrary File Upload vulnerab=
ility in MW WP Form.

November 24, 2023 =E2=80=93 We initiate contact with the plugin vendor aski=
ng that they confirm the inbox for handling the discussion.

November 24, 2023 =E2=80=93 The vendor confirms the inbox for handling the =
discussion.

November 24, 2023 =E2=80=93 We send over the full disclosure details. The v=
endor acknowledges the report and begins working on a fix.

November 29, 2023 =E2=80=93 A fully patched version of the plugin, 5.0.2, i=
s released.

Conclusion

In this blog post, we detailed an Arbitrary File Upload vulnerability withi=
n the MW WP Form plugin affecting versions 5.0.1 and earlier. This vulnerab=
ility allows unauthenticated threat actors to upload arbitrary files, inclu=
ding PHP backdoors, and execute those files on the server. The vulnerabilit=
y has been fully addressed in version 5.0.2 of the plugin.

We encourage WordPress users to verify that their sites are updated to the =
latest patched version of MW WP Form.

All Wordfence users, including those running Wordfence Premium (https://ema=
il.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FK=
qkN880g4g3prCCW7Y8-PT6lZ3m2V70wn777YXt-W51x2h_6cGvXMW3TH1gQ6XC4t3VrKg8j1mtg=
WpW7HmKZY27bLj2W6htG_S5Bww7QW5RJYL16-YSF4W3W6L847X9zRQW9hwrkN4bBJfWW7vMM4Z8=
0WbDRW3m5pZp3FsXcrW3ZWl991pjcwBW6kBNZ42cNYxLW6C1lc78Jgrc2W1NXBP51Mpy1XW6N1j=
HT1SpLpLW2dCYWT5p_qb-W1LQ-jH90Bc_yW2fMhf42lP_QjMYhxgJcHCqBW6-R1wb86dgdJW7nG=
kk52L58GMW63ZCRK5jSwqVW5m4TKl6FHb3XW40LMKZ4z-cH3W3hSQh_9gjyr5f1lQcmP04 ) , =
Wordfence Care (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B=
_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3prCCW7Y8-PT6lZ3nDW7sTys88QmF6DW4-4rjl3=
d_lcYW3RfLnJ21dC28N89RWKLd7XKCW30v6TC57rhm2W39xrNV3rRlYnW70nTHl2wDfmQW6jd9B=
7312qRLW3MqfTj4_VBsyW6WqzZZ2237VpW3VL2KQ3fs9fbW5gppQF4sjT0VN9hFyVMDyp2CW1sv=
Xl55NQmJ-W75ksrZ5PrLnDW34b5CR1RrS5-W8sRnzD1vNW_SW4CT_wS3td0l8N36XxjN7cq4PW8=
Jgv-F1khz0lW8JT0Kp4njm8gW8Qblwg3G_52QW1n_Q482hmrPrW7T7dQT2yTHqYW5-4v0g1nL-y=
nW1HMpb_7h5x5ff4fKqz-04 ) , and Wordfence Response (https://email.wordfence=
.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3pr=
CCW7Y8-PT6lZ3kVW4Fy6h29kq4X4MjRPYL-hFQPW32P_5m3GQmY_W3F2K_18B155xW12z2wC8H5=
pmRW95nwLv8N_LhdW4XB16V3wgFkHN7lHmMtg7ss_W5XTFgm3bS2nSW2YD1JW5B_t8tW1X78st9=
bDDw8W3xXGzL1l57flW6tNnFW1-6XzPW2_CQP-6YC90RW3TWyC21K6ppxW3vJl_b8f7qKlW785k=
M87hm9XzW52rYWd7vZp_TW5NyC6M4YQ9VWW68y8St1kKyxdW20GpPX6dkBPgW4x8ncL3rKx9BW6=
MCRKJ6V3_JVT_ttH1rVLSCW66Tzjh15dnPtVxMN893Sy-J6f2ykKJY04 ) , as well as sit=
es still running the free version of Wordfence, are fully protected against=
 this vulnerability.

If you know someone who uses this plugin on their site, we recommend sharin=
g this advisory with them to ensure their site remains secure, as this vuln=
erability poses a significant risk.

Did you know that Wordfence has a Bug Bounty Program (https://email.wordfen=
ce.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3=
prCCW7Y8-PT6lZ3m_N1p8qZlFcLwJW3Jgftm4KnkhDW5NPYGp7d-JZDW5Ts66d4JMrTSW5JdtLv=
8BcZnDW3Dg2mW7ttlyRW3RRBLv2nChpjW1G_c8b6jTbSZW2XlyWz8RckxHW12pZdS6f_sRjW1JB=
v-b1CZhkVW5M-TY05r1_RKW7rGrqF6t0ZNvW3-YDdY3phY42N7VrdYz8hcx-VPG5s45Kf9BpW3z=
3PCs38Pj3cW44zS7_7T4fR3W32fBLF3gHz49V8-Rk558l8tkW3GH48_5GT_vHW4Y-W--5vLY4DW=
2186Vw8tgks5W4K0ycp3Z5qWPW8GPMK_8KLtDJW3HssJ_1-0TR5f5Sl87604 ) ? We=E2=80=
=99ve recently increased our bounties by 6.25x until December 20th, 2023, w=
ith our bounties for the most critical vulnerabilities reaching $10,000 USD=
! If you=E2=80=99re an aspiring or current vulnerability researcher, click =
here to sign up. (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF=
8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3prCCW7Y8-PT6lZ3kSW1bYJhs5dRlH8V7Hsf1=
7LPmqrW8bp4h11PFMDPW63BQ5X2Kw4nVW5b4jNB6_2sHJW7Vl1jM151J42W4mcHTh8nztYkW1Gs=
sT_3WSsTzW5Z1XBR3RBKBxW3RfTsd7WlnJwW4n1P1N65bJhxW1n31w968QHXZW3rDrvl5tl6CYW=
6ZC2hy1VwCM2W8HnMs12YhzJxW8pl6VF8v-pL7W28XS6J53YzjmW7p1j3Z2yHGsLW40Cc7h29ss=
p3W5PmfvF2ZQhH3W5kV1bz8RPLVhW8xNsQP2tJ1MQW1cY3832xjMs1W6029q44xdFwmW4SpZQQ7=
kwFP-W7JV53t2mBZQZf7rQ7KM04 )

The Full Product Lineup

wf-stacked-free-1 (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3prCCW7Y8-PT6lZ3ksW3B3VDq2D8jbXN8cTH=
B5xFDqvW5fVPJb24lK2XV7BQF25bX1ZYW4z7j7l3v_H1cN5C5p6brBxbwW6M4S5k3ngJpbW2KS4=
dv6snT0bW6ZFWHp86JftRW5W371156ZCdgW7_5ttm2g3nKxW64KcxG6fhzZ0N4sjBnsF_X5DW4Y=
ZDnM92mVqlW9h-5ML5jQ56nVzJ0fS7SFYTdW8yKkKt5kYlCjW5b-VrS8R1PMtW86XmyN1Zs-gfW=
8qj4Ym5t_v4zW4FH79x7nZ9z4W6RXZ-F6tQF3BW4Y4r513qB6_RW4SMm6-2p-F_8W3JmZ_81-P0=
-GW6Qmhnt4nnTzxf49qwnx04 )

wf-stacked-premium-1 (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VW=
sPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3prCCW7Y8-PT6lZ3ljN6zbn9sn2VK4W6d=
Mpdl8xk3hNN5hY_wxQM8RbW7LlTMF6ZrhCqW6WRdLf71LwWCW3VWzGH8YLMwpW23TV0c3Pjw9zW=
746R154qCMz0W3yG0S37GRYWGW7PBCTp2MbV_WW8XSf7V7LLst4W41NXzk661_vvW6B7QmB1Y7G=
f2W9lTBhc5gmQknVMRpyv26pp07W4rkDLz8lSGsbW3Pdjnx5vTLbpW6HZHjw4j9f5qW2zVZdL3g=
jzlqW6H0xXN1-D3hFW83VPMr18ZbsDW6Hkp5J5sd3pYW5-Y1D56t71dfW1NPbPz6lwmQ8W2TR3P=
T7gSFjCW1lKTvR8CDfMBdPDKtP04 )

wf-stacked-care-3 (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3prCCW7Y8-PT6lZ3pJN34m6KgmT2sSN3Sk7q=
THKGsKW86CShd8TXxJ5W1V2Z1H440cN2W6tglrm15cPfjW82vBR293xSDzW1BC0p420qRpJW2fb=
yTR51l68TW65430z8N5xGxW8mJJX-42L5gHW4BZ_hv3Sk1RTW4Hpqb45Ql7ZlW64ByGY7Dhk_vW=
9h2H3z898Q6WW5yb5wS4kCbMNN6Pz60w11SlZW1-RWQC7Sgpk_W3-Cb6d4HtQ0pN6d7Wqyd_jJ6=
VcXggt4k22-ZW4Lq4wM3Qnbc-N56RlwvBh2PmW12grh14qvs_wW4x_vqy33kK5RVZZ6Gq2lnqZf=
Mj2hV9cD_zmf3zQZgs04 )

wf-stacked-response-2 (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/V=
WsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3prCCW7Y8-PT6lZ3kVW4Fy6h29kq4X4M=
jRPYL-hFQPW32P_5m3GQmY_W3F2K_18B155xW12z2wC8H5pmRW95nwLv8N_LhdW4XB16V3wgFkH=
N7lHmMtg7ss_W5XTFgm3bS2nSW2YD1JW5B_t8tW1X78st9bDDw8W3xXGzL1l57flW6tNnFW1-6X=
zPW2_CQP-6YC90RW3TWyC21K6ppxW3vJl_b8f7qKlW785kM87hm9XzW52rYWd7vZp_TW5NyC6M4=
YQ9VWW68y8St1kKyxdW20GpPX6dkBPgW4x8ncL3rKx9BW6MCRKJ6V3_JVT_ttH1rVLSCW66Tzjh=
15dnPtVxMN893Sy-J6f2ykKJY04 )

wf-stacked-cli (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B=
_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3prCCW7Y8-PT6lZ3pRW4lXlNw3mlQMlW1c9Mjw2=
T_rMsW5mQH339bpGNPW8n0PGF7P8TmJW6fCmmF7yrWfzVnzdhz3crYMCW4gZLJx4f3QWcW97Ft9=
P2KYRSDW794b9g8fnDsvW815BG-5vNHqYW66ng4F4nTG54W8R23Ns70J5TKN582HqcNBFfLW6vH=
c_K58P0S2W7NhlJx7lGdQPW79GNGZ7B3SzFW5ydXVC8BqN3WN8ZnSwmPFNP5W8yy8CK4K_KDdW1=
mwbHg6ktctGW4TpV0V5mxjxhW8Rn9S36dCDt-W7-ScBv6Y4rp1VgqBHR6QShY2N3z1LH7B5kP5W=
2tCg4W64vgznf6fNq2n04 )

wf-stacked-intelligence (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04=
/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3-3prCCW7lCdLW6lZ3lBW32YJ9j5RD8M=
WW7PZ0ks4Z-N6wW1m-4Mq3j31lSW9f3q1Y6Jt37HW2NnlG116Qc78W5CnWS916WScDW7RB-mq74=
YBGmW36_84-1tWQ8nW11jbvh31cRjGW1hH5116hpV-ZW7wXr0M5sdxvvW7d77LJ80QFr8W4kbYh=
K5lNH-6W9lkGn880k4hjW3nF1BM5cCpl-W2dQqTQ1qcf3mW77XwSf8t_5DYW7X_BP76tSr-MW6L=
QlK_1NmNWmW3sMF8W5Mj1HkW3pKg8M1crwgcVDNGN738wyHsW91sqts1wQ0pNW7tzVkK69Qjj8f=
3Xrfdd04 )

logo-defiant (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z=
38N62HkhXr2BGdW67tPB756FKqkN880g3H3prCCW6N1vHY6lZ3m8W8jf_F-3gGYz0W9dW6M75cV=
19KW2t52PP3r-RGwW4fzqd96QKgDBW8BG_C24h99XBW1nJ5XY2MmK-kN2DJtS5hqtJ-W6jNjjm6=
gRX8TW49cvxf5ZXV6sW3R3yvn1X-L21W1rKL9N5cS--4W5jldrq4_bFkKVTJCy48BqVCtW2wLRv=
L4vKGx5W9kPv8m3XJzk6W1s0Hqn8TjKzPVhLMcP2sR-XQN5z39R7sBljyW6j5BCT1sDccYVWj8c=
f6KLDYyW3Ck8Wn35KmFVN2cQ95CM6Q3Hf3M_Tzx04 )

Defiant, Inc., 1700 Westlake Ave N STE 200

Seattle, WA  98109 United States

Unsubscribe (https://email.wordfence.com/hs/manage-preferences/unsubscribe-=
all?languagePreference=3Den&d=3DVnbTNd892TtnVCnbkg45v0QyW3_X4wv3SXQ-tW4h29f=
m6J4V3XVmWFdM7QhKh0N8fj51q25tFfW8S3DpZ7b4zN3VX4l0r6gWGZ4MXk_7Qbw8lHW2fGLrv6=
3dwCqW6Mh43-3gNS_C3kg-2&v=3D3&_hsenc=3Dp2ANqtz-97yXEvE2UyqbuNKb-NvpyVBgLt-G=
GzAos7P7eXiUoSarnA-7_r9ovLtijzS3V_KZV49_SmbTvdm0FVvtEg2levp1y-KQ&_hsmi=3D28=
5092561 ) Manage Preferences (https://email.wordfence.com/hs/manage-prefere=
nces/unsubscribe?languagePreference=3Den&d=3DVnbTNd892TtnVCnbkg45v0QyW3_X4w=
v3SXQ-tW4h29fm6J4V3XVmWFdM7QhKh0N8fj51q25tFfW8S3DpZ7b4zN3VX4l0r6gWGZ4MXk_7Q=
bw8lHW2fGLrv63dwCqW6Mh43-3gNS_C3kg-2&v=3D3&_hsenc=3Dp2ANqtz-97yXEvE2UyqbuNK=
b-NvpyVBgLt-GGzAos7P7eXiUoSarnA-7_r9ovLtijzS3V_KZV49_SmbTvdm0FVvtEg2levp1y-=
KQ&_hsmi=3D285092561 )

ISO_27001 (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N=
62HkhXr2BGdW67tPB756FKqkN880g3H3prCCW6N1vHY6lZ3kQW3CY32P98mJgtW4j8TG94mFRYv=
W8RSSGJ6f_kWGW82jCtX16-hNpN3Pczn_tVrx3W7P9rCR8vbM47W1wDRF58WZmdFVsFZgF36QwX=
zN37dQDR8JbTyW9c8PM36RHCP7W63B0XP230jPlW4NbmFw8yWPp_W5GWZyr4DTZWmW6xPVCC2Qk=
5btW3JwNdh6y7nj7W1vF0687wFqMnW39ys2-5bWLpZW774hq56PcPqBW6vBqhL7dBM0cVJc8Jc5=
sPLR0W9f8wVg3vCKw8W6ggK3p2bQGnjf35b1Wx04 )

You're receiving this email because you signed up to the Wordfence WordPres=
s security mailing list.
------=_Part_11119761_1383759079.1701704118381
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional //EN" "http://www=
.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns=3D"http://www.w3=
.org/1999/xhtml" xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:=
v=3D"urn:schemas-microsoft-com:vml" lang=3D"en"><head>
    <title>[WordPress Security] Update ASAP! Critical Unauthenticated Arbit=
rary File Upload in MW WP Form Allows Malicious Code Execution</title>
    <meta property=3D"og:title" content=3D"[WordPress Security] Update ASAP=
! Critical Unauthenticated Arbitrary File Upload in MW WP Form Allows Malic=
ious Code Execution">
    <meta name=3D"twitter:title" content=3D"[WordPress Security] Update ASA=
P! Critical Unauthenticated Arbitrary File Upload in MW WP Form Allows Mali=
cious Code Execution">
   =20
   =20
   =20
<meta name=3D"x-apple-disable-message-reformatting">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-8">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=3D1.=
0">
    <!--[if gte mso 9]>
  <xml>
      <o:OfficeDocumentSettings>
      <o:AllowPNG/>
      <o:PixelsPerInch>96</o:PixelsPerInch>
      </o:OfficeDocumentSettings>
  </xml>
 =20
  <style>
    ul > li {
      text-indent: -1em;
    }
  </style>
<![endif]-->
<!--[if mso]>
<style type=3D"text/css">
 body, td {font-family: Arial, Helvetica, sans-serif;}
 .hse-body-wrapper-table {background-color: #FFFFFF;padding: 20px 0 !import=
ant}
</style>
<![endif]-->
   =20
     =20
   =20
  <meta name=3D"generator" content=3D"HubSpot"><meta property=3D"og:url" co=
ntent=3D"https://email.wordfence.com/-temporary-slug-dc4a5b6f-cfba-404f-8bd=
e-94e777826c9b"><meta name=3D"robots" content=3D"noindex,follow"><!--[if !(=
(mso)|(IE))]><!-- --><style type=3D"text/css">.moz-text-html .hse-column-co=
ntainer{max-width:600px !important;width:600px !important}
.moz-text-html .hse-column{display:table-cell;vertical-align:top}.moz-text-=
html .hse-section .hse-size-4{max-width:200px !important;width:200px !impor=
tant}
.moz-text-html .hse-section .hse-size-8{max-width:400px !important;width:40=
0px !important}
.moz-text-html .hse-section .hse-size-12{max-width:600px !important;width:6=
00px !important}
@media only screen and (min-width:640px){.hse-column-container{max-width:60=
0px !important;width:600px !important}
.hse-column{display:table-cell;vertical-align:top}.hse-section .hse-size-4{=
max-width:200px !important;width:200px !important}
.hse-section .hse-size-8{max-width:400px !important;width:400px !important}=
.hse-section .hse-size-12{max-width:600px !important;width:600px !important=
}
}@media only screen and (max-width:639px){img.stretch-on-mobile,.hs_rss_ema=
il_entries_table img,.hs-stretch-cta .hs-cta-img{height:auto !important;wid=
th:100% !important}
.display_block_on_small_screens{display:block}.hs_padded{padding-left:20px =
!important;padding-right:20px !important}
}</style><!--<![endif]--><style type=3D"text/css">#hs_body #hs_cos_wrapper_=
main a[x-apple-data-detectors]{color:inherit !important;text-decoration:non=
e !important;font-size:inherit !important;font-family:inherit !important;fo=
nt-weight:inherit !important;line-height:inherit !important}
a{text-decoration:underline}p{margin:0}body{-ms-text-size-adjust:100%;-webk=
it-text-size-adjust:100%;-webkit-font-smoothing:antialiased;moz-osx-font-sm=
oothing:grayscale}</style></head>
  <body id=3D"hs_body" bgcolor=3D"#FFFFFF" style=3D"margin:0 !important; pa=
dding:0 !important; font-family:Arial, sans-serif; font-size:15px; color:#5=
25355; word-break:break-word">
   =20
<div id=3D"preview_text" style=3D"display:none;font-size:1px;color:#FFFFFF;=
line-height:1px;max-height:0px;max-width:0px;opacity:0;overflow:hidden;">Ar=
bitrary File Uploads allowed through vulnerability in MW WP Form WordPress =
Plugin.&nbsp;</div>
   =20
<!--[if gte mso 9]>
<v:background xmlns:v=3D"urn:schemas-microsoft-com:vml" fill=3D"t">
    <v:fill type=3D"tile" size=3D"100%,100%" color=3D"#ffffff"/>
</v:background>
<![endif]-->
    <div class=3D"hse-body-background" style=3D"background-color:#ffffff" b=
gcolor=3D"#ffffff">
      <table role=3D"presentation" class=3D"hse-body-wrapper-table" cellpad=
ding=3D"0" cellspacing=3D"0" style=3D"border-spacing:0 !important; border-c=
ollapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0pt; margin:0; pad=
ding:0; width:100% !important; min-width:320px !important; height:100% !imp=
ortant" width=3D"100%" height=3D"100%">
        <tbody><tr>
          <td class=3D"hse-body-wrapper-td" valign=3D"top" style=3D"border-=
collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans-se=
rif; font-size:15px; color:#525355; word-break:break-word">
            <div id=3D"hs_cos_wrapper_main" class=3D"hs_cos_wrapper hs_cos_=
wrapper_widget hs_cos_wrapper_type_dnd_area" style=3D"color: inherit; font-=
size: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" d=
ata-hs-cos-type=3D"dnd_area">  <div id=3D"section-0" class=3D"hse-section h=
se-section-first" style=3D"padding-left:10px; padding-right:10px; padding-t=
op:20px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border hse-border-top" style=
=3D"min-width:280px; max-width:600px; width:100%; Margin-left:auto; Margin-=
right:auto; border-collapse:collapse; border-spacing:0; border-left:0px sol=
id #008cc1; border-right:0px solid #008cc1; box-sizing:border-box; border-t=
op:0px solid #008cc1; background-color:#FFFFFF" bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1;border-top:0px solid #008CC1" cellpadding=3D"0=
" cellspacing=3D"0" role=3D"presentation" class=3D"hse-border hse-border-to=
p" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-0-0" class=3D"hse-column hse-size-12">
  <div id=3D"hs_cos_wrapper_module-0-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"border-collapse:collapse=
; mso-line-height-rule:exactly; font-family:Arial, sans-serif; color:#52535=
5; word-break:break-word; text-align:center; padding:10px 20px; font-size:0=
px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3H3qgyTW6N1vHY6lZ3n4W84Z8_w90pGYPW8J53=
rN6LbMHWW528C6240lss8W3-JWWB6dCl8bN1XlBNZnLyNtVxCK2T3G-G0qW39YkRk4-bgJQMqZ1=
Q35lzs1W3Rsj4X10GyqwW7xnS6P96w6K1W7l5tG_8vQKDtVhHWDm5XyPhMW5yqS8110YQXwW36z=
Dlk20W-PsW7KKzLr89C3KHW4pM2g-83WNQbW7SNcct22MgLVN776cZgGw7V5W961sKx1R55XtN6=
cqx1Ft9kBnN8R2q7WDKwXnW5glpFR2YJwXlf64Mtg804" target=3D"_blank" style=3D"co=
lor:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"Wordfence-Logo.png" src=3D"https://email.wordfence.com/=
hs-fs/hubfs/Logos/Wordfence-Logo.png.png?width=3D600&amp;upscale=3Dtrue&amp=
;name=3DWordfence-Logo.png.png" style=3D"outline:none; text-decoration:none=
; -ms-interpolation-mode:bicubic; border:none; max-width:100%; font-size:16=
px" width=3D"300" align=3D"middle" srcset=3D"https://email.wordfence.com/hs=
-fs/hubfs/Logos/Wordfence-Logo.png.png?upscale=3Dtrue&amp;width=3D600&amp;u=
pscale=3Dtrue&amp;name=3DWordfence-Logo.png.png 300w, https://email.wordfen=
ce.com/hs-fs/hubfs/Logos/Wordfence-Logo.png.png?upscale=3Dtrue&amp;width=3D=
1200&amp;upscale=3Dtrue&amp;name=3DWordfence-Logo.png.png 600w" sizes=3D"(m=
ax-width: 300px) 100vw, 300px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-1" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-1-0" class=3D"hse-column hse-size-12">
  <div id=3D"hs_cos_wrapper_module-1-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"border-collapse:collapse=
; mso-line-height-rule:exactly; font-family:Arial, sans-serif; color:#52535=
5; word-break:break-word; text-align:center; padding:10px 20px; font-size:0=
px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3H5nR32W6N1X8z6lZ3m5N3Yzrl35b-4lW4QW3d=
w7ppQZBN6W-vsQBtpY5MGlGsVzdGLBW3TQ5MT2wKBCdW3FwSg_8yK2WfW62rwp09jD3l9W1WqWT=
P1FMyxlW4hvrw37-Fh6FW511bpP30n38xW1H5cYg4RT2G4W5TMMj958G5c4W8k-FPv5s4PpQN7_=
YTlkZLqYkW85_5_f4_mMM3N7GG0vGdjyGZN3L5rgskB31KW11fHgF7jH8dLW3ZyQrc6tDfv3W13=
VvmH6h7cthVzzw1g8vbGrCW1LqYFp6tDM4gW4ZSqF_5gl64WW99QqMr7w5ZQyW4nzYn092DYkwW=
21MGbt7KxQvwW4_vSQ76WDqp1W283ws17nxm0MN79-9g_J37sFW5m6vhl4lhHK0W6YgrG86ZL_h=
_W8PC9LG3nrW1TW5L4zH32Mfkf5V4ycjN8P3fkLW3Cn4KJ6H0c1WN7R-25QP6dPCN1SC1FJNzwh=
2W2WmftV3tchLhf6gJ-VT04" target=3D"_blank" style=3D"color:#00a4bd; mso-line=
-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"FeaturedImage_Wordfence_56.03" src=3D"https://email.wor=
dfence.com/hs-fs/hubfs/FeaturedImage_Wordfence_56.03.png?width=3D1120&amp;u=
pscale=3Dtrue&amp;name=3DFeaturedImage_Wordfence_56.03.png" style=3D"outlin=
e:none; text-decoration:none; -ms-interpolation-mode:bicubic; border:none; =
max-width:100%; font-size:16px" width=3D"560" align=3D"middle" srcset=3D"ht=
tps://email.wordfence.com/hs-fs/hubfs/FeaturedImage_Wordfence_56.03.png?ups=
cale=3Dtrue&amp;width=3D1120&amp;upscale=3Dtrue&amp;name=3DFeaturedImage_Wo=
rdfence_56.03.png 560w, https://email.wordfence.com/hs-fs/hubfs/FeaturedIma=
ge_Wordfence_56.03.png?upscale=3Dtrue&amp;width=3D2240&amp;upscale=3Dtrue&a=
mp;name=3DFeaturedImage_Wordfence_56.03.png 1120w" sizes=3D"(max-width: 560=
px) 100vw, 560px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
<table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D"1=
00%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-ta=
ble-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" st=
yle=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-family:=
Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; pa=
dding:10px 20px"><div id=3D"hs_cos_wrapper_module-1-0-1" class=3D"hs_cos_wr=
apper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color: inh=
erit; font-size: inherit; line-height: inherit;" data-hs-cos-general-type=
=3D"widget" data-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapper_module-1-=
0-1_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_ric=
h_text" style=3D"color: inherit; font-size: inherit; line-height: inherit;"=
 data-hs-cos-general-type=3D"widget" data-hs-cos-type=3D"rich_text"><p styl=
e=3D"mso-line-height-rule:exactly; line-height:175%">On November 24, 2023, =
the Wordfence Threat Intelligence team identified and began the responsible=
 disclosure process for an Unauthenticated Arbitrary File Upload vulnerabil=
ity in MW WP Form plugin, which is actively installed on more than 200,000 =
WordPress websites. This vulnerability makes it possible for an unauthentic=
ated attacker to upload arbitrary files, including PHP files, and achieve r=
emote code execution on a vulnerable site=E2=80=99s server when the =E2=80=
=9CSaving inquiry data in database=E2=80=9D option in the form settings is =
enabled.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">All <a href=3D"=
https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGd=
W67tPB756FKqkN880g4g3qgyTW7Y8-PT6lZ3kHW5GKj2K6s55ykW2klMQW5G_W8xW97dkGw91yv=
35W1Dfynk8D2RXnW701mP28Kb5xfW8kwNxv1plMykN2V5cXkLxr22N36VSlRV86cRW1pQh001JY=
2YWW4DT_jv5chhGlW61fjtM1JDHhtW3jJDpb1n9YswW8zwsk359xt3KW4BgDNQ4nd0pZW7tL1Sr=
7S7cNlW6KvNGY4pb2G8W15Y6-v7HCqWNW1BYCZx3S_GM6W6QFRhM71DT09W20wDxC5Pf6v_N3Xb=
Fk_gl8qGW5-wchq3KqVz3W6wYcS36KKwr4W5GHGT81P8KDJW6tzHzY5LwF81W90_NQt7DTp3DdY=
2pv004" target=3D"_blank" rel=3D"noopener" style=3D"color:#00a4bd; mso-line=
-height-rule:exactly" data-hs-link-id=3D"0">Wordfence Premium</a>,&nbsp;<a =
href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62H=
khXr2BGdW67tPB756FKqkN880g4g3qgyTW7Y8-PT6lZ3lSW67Dp1V7nwPKhW4jkpnp8nDCc8N2j=
wVgmPQwZ9W59xwdF3tBs6nW57b9Tq1-9FrvW6VnTQb6wmQgKW76H32K4vWBJmW1SsqS83P8hZYW=
9lLnNJ3rnmsCN4Ln1357v9LnW2pyVqN9gC1PvW7vQS693Nb_RzN3q0WJ2vmHPpW7yqXFL4BWzW_=
W6TK53m5k4MbFW8KQ0CN6vlm5PW5Dl6PS1zMntMW3jwvHf2dMdB7Vkgh4-4bdgv7N5y7lVL5RmH=
jW4Fp4-W3FrBGYW88ryVy4Nf79kN2JmgH9-YnrRW4fWdw51VZ98jW2-yP3f5-b2RlW2655bh6BS=
MbNf1CVg8j04" target=3D"_blank" rel=3D"noopener" style=3D"color:#00a4bd; ms=
o-line-height-rule:exactly" data-hs-link-id=3D"0">Wordfence Care</a>, and&n=
bsp;<a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_=
z38N62HkhXr2BGdW67tPB756FKqkN880g4g3qgyTW7Y8-PT6lZ3p-W5BT7yF4NKM_sN60_KVrdq=
6z0W82G-gJ7ytKswW8vQkyz6jkzc7W1hbZT86bzMmFW8M5DNZ6cLdp0W5fDRMV1BMqXsW3GQ8Xn=
2213C_W4VV4DS2c-x9xN63FDJBzGFQ2W3YyzzN7dZHn0W5ZWv9V4vKX-xW4kLXWd2fjPbmW3P8x=
tb4q4rtKW6z7-715FfBMcW177-XZ2Dcy3DVvyWjh7k8by9N7DmYyRCBPlwW39xJ_H6WsxSBW4qC=
rJh9dwfK2W86VBJT8mRmMhW1gntVl7g9skyW3yt_LW2dj7-XW3PqS1h2mvvJ_W78bhCc87cLl0W=
8Hf3N51-vw4cf3hPbVT04" target=3D"_blank" rel=3D"noopener" style=3D"color:#0=
0a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0">Wordfence Respon=
se</a> customers, as well as those still using the free version of our plug=
in, are protected against any exploits targeting this vulnerability by the =
Wordfence firewall=E2=80=99s built-in Malicious File Upload protection.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">We contacted th=
e Web-Soudan Team on November 24, 2023, and received a response the same da=
y. After providing full disclosure details, the developer released a patch =
on November 29, 2023. We would like to commend The Web-Soudan Team for thei=
r prompt response and timely patch.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">We urge users t=
o update their sites with the latest patched version of MW WP Form, which i=
s version 5.0.2 at the time of this writing, as soon as possible.</p></div>=
</div></td></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-2" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-2-0" class=3D"hse-column hse-size-12">
  <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D=
"100%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-=
table-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" =
style=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-famil=
y:Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; =
padding:10px 20px"><div id=3D"hs_cos_wrapper_module_16971242493161" class=
=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=
=3D"color: inherit; font-size: inherit; line-height: inherit;" data-hs-cos-=
general-type=3D"widget" data-hs-cos-type=3D"module">
 =20
  <table align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" =
role=3D"presentation" style=3D"border-spacing:0 !important; mso-table-lspac=
e:0pt; mso-table-rspace:0pt; border-collapse:separate!important">
    <tbody><tr>
        <!--[if mso]>
      <td align=3D"center" valign=3D"middle" bgcolor=3D"#00709E" valign=3D"=
middle" style=3D"border-radius:8px;cursor:auto;background-color:#00709E;pad=
ding:12px 18px;">
    <![endif]-->
    <!--[if !mso]><!-- -->
      <td align=3D"center" valign=3D"middle" bgcolor=3D"#00709E" style=3D"b=
order-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, s=
ans-serif; font-size:15px; color:#525355; word-break:break-word; border-rad=
ius:8px; cursor:auto; background-color:#00709E">
   <!--<![endif]-->
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3H5nR32W6N1X8z6lZ3kTW80kCgX65jt91W2lYL=
vr4hJ-zBW7rXRcl759qdzN6-R0YDnrMyVW55wrqV8FjLlNW2n8GQW82vmxRW1nzB9k3GJL0vVf1=
k0B3dmJg1W1kNH9C90kMb9W3J57lT4KZ501W1TQMd61db538W2_81_t59Vt_XN8mHFK8PNX4bW4=
zynP_5bNmy-Vj7TMy1bclcQN5_GKKW5nTSDW5CrrxH23JfkbW8NrzC6599YGMW5740Tp1jJ-4MW=
8TRnPB5SwM1RW4NXdFz4Ld56PW1L358Q8Hx-yHW6mmm6P52x7Q3W4ty6Xp1LtN18W7SwW0y2Z86=
HxW2FM6rk3ZHs6yN7jnVF85M8C2W1w74pw26LvHmW4c1hB62G5xzkW2j6ChQ1Td6fxN3P5lZ_JG=
xSSW4HpSH426l5dWW67_mFk7403_tW901N2x1sKtjlM2V3St1rsv5VVZLKj1mfhlnW1vPw-81Mt=
v8_VHf20-5sK57mf3VHb3604" target=3D"_blank" style=3D"color:#00a4bd; mso-lin=
e-height-rule:exactly; font-size:16px; font-family:arial, helvetica, sans-s=
erif; Margin:0; text-transform:none; text-decoration:none; padding:12px 18p=
x; display:block" data-hs-link-id=3D"1">
          <strong style=3D"color:#ffffff;font-weight:normal;text-decoration=
:none;font-style:normal;">CONTINUE READING ON THE BLOG</strong>
        </a>
      </td>
    </tr>
  </tbody></table>
</div></td></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-3" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-3-0" class=3D"hse-column hse-size-12">
  <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D=
"100%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-=
table-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" =
style=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-famil=
y:Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; =
padding:10px 20px"><div id=3D"hs_cos_wrapper_module_17017021384302" class=
=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=
=3D"color: inherit; font-size: inherit; line-height: inherit;" data-hs-cos-=
general-type=3D"widget" data-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapp=
er_module_17017021384302_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs=
_cos_wrapper_type_rich_text" style=3D"color: inherit; font-size: inherit; l=
ine-height: inherit;" data-hs-cos-general-type=3D"widget" data-hs-cos-type=
=3D"rich_text"><h2 style=3D"margin:0; mso-line-height-rule:exactly; line-he=
ight:175%; font-size:22px">Vulnerability Summary from Wordfence Intelligenc=
e</h2></div></div></td></tr></tbody></table>
<table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D"1=
00%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-ta=
ble-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" st=
yle=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-family:=
Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; pa=
dding:10px 20px"><div id=3D"hs_cos_wrapper_module_17017021457173" class=3D"=
hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"c=
olor: inherit; font-size: inherit; line-height: inherit;" data-hs-cos-gener=
al-type=3D"widget" data-hs-cos-type=3D"module"><div style=3D"padding: 6px; =
margin-bottom: 1em; background-color: #f2f2f2; line-height: 1.4;"><strong>D=
escription:</strong><a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/c=
wG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3n5nR32W69t95C6lZ3l_N2T3wR=
8k1bx9W16jyKG6pqkgHW5xb7pX36fFp7W2thtsf2SHf4sW1MGxHy4KHpGlVmltYp5DCfG0Mfvk7=
-pDySfW3Vr45t6YFhKvW5NMCsd8RHHdNW2wQrGK98FDpRW1kdX2f8GtxFfW5ysLcs98B6MTW9gt=
pKr1tqBP9W2SZb6P51brSTW7L9rHd5KnpJTW7S4J_68lTTScW6ymNzW5B2bDsW5YRF6B4JKRc3W=
51PfwC96bZ0sMZ_Gb2-bXbyV6SmjL5JyCKsW49M9Nk3pCc1_W2BqSg958C3SZW3t1Hgr8C72L7W=
7k9Spy4MC26yN1yrzykNj_QMW7v1WQw1mcmC0W1m9tfL7NXCRJW58971Q85yzZ6W8WDCHr5FPFd=
_W4M0VTl1DW0NNV1klsL8wTDB7W7jy39W7h4KBpW5Vlvq04Mdx3wW8v_RFB6Hw34FW8zMb_T6kK=
mNkf7rpsYd04" rel=3D"noopener" target=3D"_blank" style=3D"color:#00a4bd; ms=
o-line-height-rule:exactly" data-hs-link-id=3D"0"> MW WP Form &lt;=3D 5.0.1=
 =E2=80=93 Unauthenticated Arbitrary File Upload</a><br>
<strong>Affected Plugin:</strong> MW WP Form<br>
<strong>Plugin Slug:</strong> mw-wp-form<br>
<strong>Affected Versions:</strong> &lt;=3D 5.0.1<br>
<strong>CVE ID:</strong> CVE-2023-6316<br>
<strong>CVSS Score:</strong> 9.8 (Critical)<br>
<strong>CVSS Vector:</strong> CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H<=
br>
<strong>Researcher/s:</strong> <a href=3D"https://email.wordfence.com/e3t/C=
tc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4T3qgyTW95jsWP6=
lZ3lyW7W-Bkj1bqH8YW8dcJXh10Tp5vW38Tkv48Y5BK3W8ndbb34S4F5QW3YxbmS5ZpBZzW6P4c=
qG1y2YJ3W31HR-03qFysGW7_bv6t8F44V7N45GyCBjzXm0W8vF9PW5cs7W4MKcrS1xNNBNW2qcD=
_s1bYmgLW7f1t_s24g81PW1ZKJHK4KYwbgW7nDQHZ2tPCb7W7jMwTm4G-2xWW6n5GtJ2S-0kfVv=
_sXz6KCxvPW88K-kV1lZsD4V36n3J7xydl_W5yPTzn6LBYKCW18fB_41GMs3VVLFH7K1pfS55W1=
ybhjH8FtrQnW4KLtJc8j-9fzVnJMDS53Tr6ZW38MPHn6SVGrJW2VtHqF89pzQhW3MRMtj1Lp6nk=
W6qXXVq3MQTBjf5b7jMM04" target=3D"_blank" rel=3D"noopener" style=3D"color:#=
00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0">Istv=C3=A1n M=
=C3=A1rton</a><br>
<strong>Fully Patched Version:</strong> 5.0.2</div></div></td></tr></tbody>=
</table>
<table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D"1=
00%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-ta=
ble-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" st=
yle=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-family:=
Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; pa=
dding:10px 20px"><div id=3D"hs_cos_wrapper_module_17014608842347" class=3D"=
hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"c=
olor: inherit; font-size: inherit; line-height: inherit;" data-hs-cos-gener=
al-type=3D"widget" data-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapper_mo=
dule_17014608842347_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_=
wrapper_type_rich_text" style=3D"color: inherit; font-size: inherit; line-h=
eight: inherit;" data-hs-cos-general-type=3D"widget" data-hs-cos-type=3D"ri=
ch_text"><div style=3D"mso-line-height-rule:exactly; line-height:175%">
<p style=3D"mso-line-height-rule:exactly; line-height:175%">The MW WP Form =
plugin for WordPress is vulnerable to arbitrary file uploads due to insuffi=
cient file type validation in the =E2=80=98<span style=3D"font-family: 'Cou=
rier New', Courier, monospace;">_single_file_upload</span>=E2=80=99 functio=
n in versions up to, and including, 5.0.1. This makes it possible for unaut=
henticated attackers to upload arbitrary files on the affected site=E2=80=
=99s server which may make remote code execution possible.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<h2 style=3D"margin:0; mso-line-height-rule:exactly; line-height:175%; font=
-size:22px">Technical Analysis</h2>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">The MW WP Form =
plugin provides a shortcode-based form builder, with many customizable fiel=
ds and many useful form options. Files can also be uploaded to the form wit=
h the&nbsp;<span style=3D"font-family: 'Courier New', Courier, monospace;">=
[mwform_file name=3D"file"]</span>&nbsp;shortcode field.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">Examining the c=
ode reveals that the plugin uses the&nbsp;<span style=3D"font-family: 'Cour=
ier New', Courier, monospace;">_single_file_upload</span>()&nbsp;function i=
n the&nbsp;<span style=3D"font-family: 'Courier New', Courier, monospace;">=
MW_WP_Form_File</span>&nbsp;class to file upload, and the&nbsp;<span style=
=3D"font-family: 'Courier New', Courier, monospace;">check_file_type</span>=
() function in the MWF_Functions class is used to check the file type.</p>
<div style=3D"mso-line-height-rule:exactly; line-height:175%">
<div style=3D"mso-line-height-rule:exactly; line-height:175%">
<div style=3D"mso-line-height-rule:exactly; line-height:175%">
<div style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</div>
<div style=3D"mso-line-height-rule:exactly; line-height:175%"><a href=3D"ht=
tps://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW6=
7tPB756FKqkN880g3H5nR32W6N1X8z6lZ3mPW6KYR7w2LVh7CN1LyNh2DhZB4W4HT0rm604X8rW=
76ydM53gKm06W7jqFZ72fCPb3W8WQ-dr3gQnPMW1pyylj78-QlWN6nybq4MbK6LW5fQPwY8-HP-=
5W841Sry1h5w8GW1bk5Hy8HtH9zW3hwnbl1QgZjJW759Yyr2PFY3BW6czZ5r5jG_KJW5jVTPP83=
BdcNW17NfDH6_9bcjN8sbW8Rf_r--W4DDZDM9bJmLvW4wgvK36-0dSLW7p5Txf5gNpcbW8z_tqv=
8LmRG6W3dRt-R7gDfrKW3tB-bQ7MLG6RW3C5VXx2MZqgSW1WSF5v8VkZHPW8tCmH51W5DjbW3sN=
8-q24rpP8W1m0FDB7n2K1lVMz5922D-vDLN9lcD_62_Sp6W6n7fGn3wmGknW3cNdKN7s7FLNW5S=
6sBR8C-YCLV5gf3p1CKCDNW8pkYbH4G3VsKW65R8Tm8WxM2dW7qRytp33TC_ZW3SQctZ8PYhM6f=
64Mj7604" rel=3D"noopener" style=3D"color:#00a4bd; mso-line-height-rule:exa=
ctly" data-hs-link-id=3D"2" target=3D"_blank"><em>[View the code snippet on=
 the blog]&nbsp;</em></a></div>
<div style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</div>
</div>
</div>
</div>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">The upload func=
tion checks the file and then copies it to the server with the&nbsp;<span s=
tyle=3D"font-family: 'Courier New', Courier, monospace;">move_uploaded_file=
</span>()&nbsp;function. The file is only stored on the server if the =E2=
=80=9CSaving inquiry data in database=E2=80=9D option is selected in the fo=
rm settings. Otherwise the file is immediately deleted after submitting the=
 form.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%"><a href=3D"http=
s://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67t=
PB756FKqkN880g3H5nR32W6N1X8z6lZ3m7W8jBLPm5t-7JRVPj1xf5YBMhJW6k-nR16bLT75W36=
Mqv26S30qgW3WsrxT7vrsh2W6S5qH12St223W7YT2Jp7v7hn0W3jn5d9432dBpVRz-658F_GqrW=
6L1QnZ87zHYMN1D_kY3dHGD3W7vCnDc2HwDT_W71XM6f7jdcKsN8qhR37lG37JW5jrJ7F3rx1TN=
W86psX97ZN-8yW2Nn6kG1mYlMKW1wP5gW5-rzxgW8zrKhT6gz2lGW5cfddd7bp9Y-N2wZWwXH28=
3nW4fYsbC7_8csLW44BYFV2xvvgMW7g_-9K4vN6L4V8LbLF3H9J_rW20z7TN3FJPsDW1btwyb7Y=
Th5bW7jYyDz6NLXZJW1VTV_v1G8j5vW5f7T0Q8LLMR1W7ls5dp7M6dTSW4c-l_t62NGKLN8Q4Yq=
X-3d_VVfG9MP8k1m6_W5DzTW53gC46WW76s_Rx4R0v_lVBF1nw6jjJF-W8C5D2d3BslgNf7jxRG=
T04" rel=3D"noopener" style=3D"color:#00a4bd; mso-line-height-rule:exactly"=
 data-hs-link-id=3D"3" target=3D"_blank"><em>[View the code snippet on the =
blog]&nbsp;</em></a></p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">Unfortunately, =
although the file type check function works perfectly and returns false for=
 dangerous file types, it throws a runtime exception in the try block if a =
disallowed file type is uploaded, which will be caught and handled by the c=
atch block. The catch block only uses the&nbsp;<span style=3D"font-family: =
'Courier New', Courier, monospace;">error_log</span>()&nbsp;function to log=
 the error without interrupting the upload. This means that even if the dan=
gerous file type is checked and detected, it is only logged, while the func=
tion continues to run and the file is uploaded. This means that attackers c=
ould upload arbitrary PHP files and then access those files to trigger thei=
r execution on the server, achieving remote code execution.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">We would like t=
o draw attention once again to the fact that the vulnerability only critica=
lly affects users who have enabled the =E2=80=9CSaving inquiry data in data=
base=E2=80=9D option in the form settings, because the plugin only saves th=
e files in this configuration.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<h2 style=3D"margin:0; mso-line-height-rule:exactly; line-height:175%; font=
-size:22px">Disclosure Timeline</h2>
<p style=3D"mso-line-height-rule:exactly; line-height:175%"><strong>Novembe=
r 24, 2023</strong>&nbsp;=E2=80=93 Discovery of the Arbitrary File Upload v=
ulnerability in MW WP Form.<br><strong>November 24, 2023</strong>&nbsp;=E2=
=80=93 We initiate contact with the plugin vendor asking that they confirm =
the inbox for handling the discussion.<br><strong>November 24, 2023</strong=
>&nbsp;=E2=80=93 The vendor confirms the inbox for handling the discussion.=
<br><strong>November 24, 2023</strong>&nbsp;=E2=80=93 We send over the full=
 disclosure details. The vendor acknowledges the report and begins working =
on a fix.<br><strong>November 29, 2023</strong>&nbsp;=E2=80=93 A fully patc=
hed version of the plugin, 5.0.2, is released.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<h2 style=3D"margin:0; mso-line-height-rule:exactly; line-height:175%; font=
-size:22px">Conclusion</h2>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">In this blog po=
st, we detailed an Arbitrary File Upload vulnerability within the&nbsp;MW W=
P Form plugin&nbsp;affecting versions 5.0.1 and earlier. This vulnerability=
 allows unauthenticated threat actors to upload arbitrary files, including =
PHP backdoors, and execute those files on the server. The vulnerability has=
 been fully addressed in version 5.0.2 of the plugin.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">We encourage Wo=
rdPress users to verify that their sites are updated to the latest patched =
version of MW WP Form.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">All Wordfence u=
sers, including those running&nbsp;<a href=3D"https://email.wordfence.com/e=
3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3qgyTW7Y8=
-PT6lZ3q7W7tSy461XtgxvVGKP6823kbY-VRjcqn4MjTbXW8rMgc66wCTk_W9cL-z04hCP59W1b=
xgH74v-Pl0VDLnbG1vwSDvW6-fDzl44Yq7XW5PJ0fN3RY7c8W5X2xsZ5yClxjW9g8MgR8PFcFWW=
3sWgz81lv_vkW818dy32gr2SYW4lpBjc8yQn8ZW7mQsfl5xpl3ZW6lj93b1ZgqkGW6K-nsD3jyx=
KmW4PmM-82zbgfrW1fvdVw5ccHbrW1PJBjF79gN6bW2ZxFpq8JCxvYW2rKDyR4p30GyW4z2Snt5=
Sz96NW5SczSj4Yfz_CN8ntxwsw1FwfW8vXNWb3kBYPHf3jCl4004" target=3D"_blank" rel=
=3D"noopener" style=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs=
-link-id=3D"1">Wordfence Premium</a>,&nbsp;<a href=3D"https://email.wordfen=
ce.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3=
qgyTW7Y8-PT6lZ3nwVqZb_S8FR-DfW8w6x7h3YvljtW72htBh90pDs7W59wnz25tKQ_SW2rmNd2=
4-1t35N8CRHfrK1_T_W5RHPMy7_M2L5W57D9Bv3l4bJwN4W8bWJjp94KW3cyjSB1SvQJsW1wgk6=
f2pLfSKN19Byd5ddwSJW2Jcm1v5lRl_3W5KYzpd1MKzc6N5BxCyCHDvXWW1bh99z67sVJKVv3dt=
m7YS3Y7W50fKB-5GD8VbW24w12s7zB_3tW7rVzwz2WLV-YVmCckR1TK-l9W5Kht1L56q0vCW2nz=
drZ5PkRnVW2qbDgT7SWC4zW7vVGCk4lwyKRW6gTmLs3CrDlHf1Hq-PH04" target=3D"_blank=
" rel=3D"noopener" style=3D"color:#00a4bd; mso-line-height-rule:exactly" da=
ta-hs-link-id=3D"1">Wordfence Care</a>, and&nbsp;<a href=3D"https://email.w=
ordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN8=
80g4g3qgyTW7Y8-PT6lZ3kNW6k1pgb1P9qmHW4l5hjQ3jTJqzVKpTDW4F1vXxMRFvBBqnkLkW1K=
zdRL5FvWC3W11Q1Zl1_KD_MW78TsY26dlS5cN1xqjHGzk9xVW9bBHSt6wmvvwW6HdGmj1GCsp9W=
8DTXH31CvGFqW2vM0TV8GSLdbW4FkkNj39nzvMW4dzKsj4FGx7rVScxlk947bfrW1jxkKH8fnJD=
XW3zHQFr4TypfqN6xqtNVh-hJXW6xmVzy5sG4z9N7sZgV3nMTcHW7v-4908PKMXGW81yx9q37h6=
T6W4mWg8t5fk83NW2lXtj42nVFSnW69F-nV8dXmKsW88-tlv7cQ3ywf6zl34R04" target=3D"=
_blank" rel=3D"noopener" style=3D"color:#00a4bd; mso-line-height-rule:exact=
ly" data-hs-link-id=3D"1">Wordfence Response</a>, as well as sites still ru=
nning the free version of Wordfence, are fully protected against this vulne=
rability.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">If you know som=
eone who uses this plugin on their site, we recommend sharing this advisory=
 with them to ensure their site remains secure, as this vulnerability poses=
 a significant risk.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%"><em>Did you kno=
w that Wordfence has a&nbsp;<a href=3D"https://email.wordfence.com/e3t/Ctc/=
GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4z3qgyTW8wLKSR6lZ3=
l7W45RlVl6wMXB3VM45wq7vvzM6W6-N2J79jCf_XW2sq7YK4lJf-1V_vBhC5DV_2tW2SrJrX1pB=
pDpW9l10nV7dvqMpW4NSBlt6mSBNjW4kS_XZ6P4rXJW3cc8fT1crv0lW4Zq9sT8XcfmdW1CXvKD=
1Ds1PpW75VF4b4sP0K0W1MvKDv2CTgBhW93bl2j1Nq21mW5lt11g7Rt9s2W8b2fk63Bbr8CW8Sd=
Qtm3MLzHrVkQBCx1CdT5LW1f0j4v2WvVCDW1b2-9C50R3CsW3DLcp76hHpp4W5tnQyN3sGN4gW8=
p43_p3g5WnBW7X2_7F7g1KHPW6XVyX43C8lhqV4DKV470XcngN3LMpcWF9xnMf66285204" tar=
get=3D"_blank" rel=3D"noopener" style=3D"color:#00a4bd; mso-line-height-rul=
e:exactly" data-hs-link-id=3D"0">Bug Bounty Program</a>? We=E2=80=99ve rece=
ntly increased our bounties by 6.25x until December 20th, 2023, with our bo=
unties for the most critical vulnerabilities reaching $10,000 USD! If you=
=E2=80=99re an aspiring or current vulnerability researcher,&nbsp;<a href=
=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPtF8B_z38N62HkhXr=
2BGdW67tPB756FKqkN880g4z3qgyTW8wLKSR6lZ3q6W2DnHT23gwHjFW5jX_Zz5s1CtXW4ZHRV6=
89_QQMN8R68yr2SCr3N4gJ4f3PnldrW7Fd6r48Z6wBPW1yB9z44L5sF0Vx8TVg6H4STyV5Lqxl2=
kR526W9l-NkC6vqyxdW2fHVPC9kRnS5W644MKB6rzCNxW3l6rsS1lBc0wN4jGJ4DtrZwLW6VJtd=
M57J6rJN89-HmdP0HC_V5jcDc2ZGG56W6K5RL-8Qs974W3zGKSx4TXLnVW2kk_vG2hSLWqW2WJ4=
Gn4tFnq7W1kY72h3HsH95W6wczZM7cHc1wW5lLPcV8D1X_vW6GPSLW5TJSW6W73Kdpm2TN6MsW1=
8yMcM3wwc4zW4bzhQV2g_cWxf2GlP4C04" target=3D"_blank" rel=3D"noopener" style=
=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0">clic=
k here to sign up.</a></em></p>
</div>
<div style=3D"mso-line-height-rule:exactly; line-height:175%">
<div style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</div>
</div></div></div></td></tr></tbody></table>
<table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D"1=
00%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-ta=
ble-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" st=
yle=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-family:=
Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; pa=
dding:10px 20px"><div id=3D"hs_cos_wrapper_module_17017012482821" class=3D"=
hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"c=
olor: inherit; font-size: inherit; line-height: inherit;" data-hs-cos-gener=
al-type=3D"widget" data-hs-cos-type=3D"module"><!--[if gte mso 9]>
<div style=3D"line-height: 0; font-size: 0px">
  <v:rect xmlns:v=3D"urn:schemas-microsoft-com:vml" fill=3D"true" stroke=3D=
"false" style=3D"width:560px; height:2pt;" fillcolor=3D"none">
    <v:fill type=3D"tile"/>
    <v:textbox inset=3D"0,0,0,0">
      <div>
<![endif]-->
<table role=3D"presentation" width=3D"100%" align=3D"center" border=3D"0" s=
tyle=3D"position:relative; top:-1px; min-width:20px; width:100%; max-width:=
100%; border-spacing:0; mso-table-lspace:0pt; mso-table-rspace:0pt; border-=
collapse:collapse; font-size:1px">
  <tbody><tr>
    <td width=3D"auto" style=3D"border-collapse:collapse; mso-line-height-r=
ule:exactly; font-family:Arial, sans-serif; font-size:15px; color:#525355; =
word-break:break-word; line-height:0"><!--[if mso 16]>&nbsp;<![endif]--></t=
d>
    <td width=3D"50%" valign=3D"middle" style=3D"border-collapse:collapse; =
mso-line-height-rule:exactly; font-family:Arial, sans-serif; font-size:15px=
; color:#525355; word-break:break-word; line-height:0; border:transparent; =
border-bottom:1px solid #000000; mso-border-bottom-alt:2pt solid #000000; b=
order-bottom-width:1px"><!--[if mso 16]>&nbsp;<![endif]--></td>
    <td width=3D"auto" style=3D"border-collapse:collapse; mso-line-height-r=
ule:exactly; font-family:Arial, sans-serif; font-size:15px; color:#525355; =
word-break:break-word; line-height:0"><!--[if mso 16]>&nbsp;<![endif]--></t=
d>
    </tr>
</tbody></table>
<!--[if gte mso 9]>
      </div>
    </v:textbox>
  </v:rect>
</div>
<![endif]--></div></td></tr></tbody></table>
<table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D"1=
00%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-ta=
ble-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" st=
yle=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-family:=
Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; pa=
dding:0px 20px 15px"><div id=3D"hs_cos_wrapper_module-3-0-0" class=3D"hs_co=
s_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color:=
 inherit; font-size: inherit; line-height: inherit;" data-hs-cos-general-ty=
pe=3D"widget" data-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapper_module-=
3-0-0_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_r=
ich_text" style=3D"color: inherit; font-size: inherit; line-height: inherit=
;" data-hs-cos-general-type=3D"widget" data-hs-cos-type=3D"rich_text"><h2 s=
tyle=3D"margin:0; mso-line-height-rule:exactly; font-size:20px; line-height=
:175%; text-align:center; font-weight:bold" align=3D"center"><span style=3D=
"font-family: Arial, sans-serif; color: #000000;">The Full Product Lineup</=
span></h2></div></div></td></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-4" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-4-0" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-4-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"border-collapse:collapse=
; mso-line-height-rule:exactly; font-family:Arial, sans-serif; color:#52535=
5; word-break:break-word; text-align:center; padding:10px 20px; font-size:0=
px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3qgyTW7Y8-PT6lZ3l4W370VK15DKWH5V2g0q=
Y4zHJw7W7WjZFL3YxzLhW1895kV9dys0XW6yd0FD6BNgcWVbdcxN4snvfBN7FF24rjGlH4W12y3=
N_2LQpr9W3GtLKh8-WjtJW1tGsLV5W6RtRW7dHkhB7gCDfYW76FvD_6Bb3YlVYb22R7QRYPxW89=
pM3s1yPr7DW2PYtwF3ybMrjN2SVTNvXxXyZW1m6GBM4r4zWdW1ybQZt20C9M9V-KjWJ4tHzPSW5=
j-vQX6PrSq_W7TGdFl4hcPX1VHR1fv8Q8r5lW40L9by30GsCHW7zkRNx4g9DXrW3W3KZk6j6pjf=
W7b5dnT10p0S4f18b_zM04" target=3D"_blank" style=3D"color:#00a4bd; mso-line-=
height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"wf-stacked-free-1" src=3D"https://email.wordfence.com/h=
s-fs/hubfs/wf-stacked-free-1.jpg?width=3D200&amp;upscale=3Dtrue&amp;name=3D=
wf-stacked-free-1.jpg" style=3D"outline:none; text-decoration:none; -ms-int=
erpolation-mode:bicubic; border:none; max-width:100%; font-size:16px" width=
=3D"100" align=3D"middle" srcset=3D"https://email.wordfence.com/hs-fs/hubfs=
/wf-stacked-free-1.jpg?upscale=3Dtrue&amp;width=3D200&amp;upscale=3Dtrue&am=
p;name=3Dwf-stacked-free-1.jpg 100w, https://email.wordfence.com/hs-fs/hubf=
s/wf-stacked-free-1.jpg?upscale=3Dtrue&amp;width=3D400&amp;upscale=3Dtrue&a=
mp;name=3Dwf-stacked-free-1.jpg 200w" sizes=3D"(max-width: 100px) 100vw, 10=
0px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
<!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-4-1" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-4-1-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"border-collapse:collapse=
; mso-line-height-rule:exactly; font-family:Arial, sans-serif; color:#52535=
5; word-break:break-word; text-align:center; padding:10px 20px; font-size:0=
px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3qgyTW7Y8-PT6lZ3n1W46TJ9n691VwhW4M-V=
pJ7475lXW5KVDkj8LsC4KN4cVFptMHGGWW3FsDTw21yLkWW2tXQzL1xRtfGW7DTnk92Md6fFW5y=
_rL58ddZBPW5gb_2c7JVsm-W2_c8g73jwM5DMCMl8SzMC5gW4h76BJ2N2_jSW8Ph1Rp13FxJ6W9=
91gcf7sx8g5W4CQSZP5vL2wtW8NTBhn6RtqWlW3H4TTJ1YqnDGW2lMxPc99Lw16N7LMjXK89YTZ=
N8rgmRmp_1jCW53FJv_2n12NMW75tCRY5bcfYDW26CjVw2HcjZ_W7nZ57F7C8BcVV1qZWd60Nd5=
yW4mxWVf41T85wf94g3TW04" target=3D"_blank" style=3D"color:#00a4bd; mso-line=
-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"wf-stacked-premium-1" src=3D"https://email.wordfence.co=
m/hs-fs/hubfs/wf-stacked-premium-1.jpg?width=3D200&amp;upscale=3Dtrue&amp;n=
ame=3Dwf-stacked-premium-1.jpg" style=3D"outline:none; text-decoration:none=
; -ms-interpolation-mode:bicubic; border:none; max-width:100%; font-size:16=
px" width=3D"100" align=3D"middle" srcset=3D"https://email.wordfence.com/hs=
-fs/hubfs/wf-stacked-premium-1.jpg?upscale=3Dtrue&amp;width=3D200&amp;upsca=
le=3Dtrue&amp;name=3Dwf-stacked-premium-1.jpg 100w, https://email.wordfence=
.com/hs-fs/hubfs/wf-stacked-premium-1.jpg?upscale=3Dtrue&amp;width=3D400&am=
p;upscale=3Dtrue&amp;name=3Dwf-stacked-premium-1.jpg 200w" sizes=3D"(max-wi=
dth: 100px) 100vw, 100px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
<!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-4-2" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-4-2-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"border-collapse:collapse=
; mso-line-height-rule:exactly; font-family:Arial, sans-serif; color:#52535=
5; word-break:break-word; text-align:center; padding:10px 20px; font-size:0=
px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3qgyTW7Y8-PT6lZ3nnW90zS0668tkQKVg635=
l82y_cYW1Yp8KM2nk2vyW7MVm_L3DdQhPW4N2w2m291hRzW11cFLj224SsBW3PPsGR6V7NdZW8V=
VnJX7_tlHvN5yx91ZDy42vW1Qypz392pC3VN4C_RzZzS_KjW4gBjVH7rXXhDW7sRFTJ6cyzBGW9=
0FPN_4YDk-xW4TN9gw13P6bCW54tmVd1cgdBjW1WMP5s1DBg5-W53YDD71RCMhHVTrK1l7v8lcS=
W6_s8_h79mkKdN7V0hsMDFWY-W2Kb_4L3l-6mCV9Lp9v2M0GZnW1Mmq606d3_71W3Xqr5l22f9m=
0W4-63Nb1Tfd8Yf6dh6_l04" target=3D"_blank" style=3D"color:#00a4bd; mso-line=
-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"wf-stacked-care-3" src=3D"https://email.wordfence.com/h=
s-fs/hubfs/wf-stacked-care-3.jpg?width=3D200&amp;upscale=3Dtrue&amp;name=3D=
wf-stacked-care-3.jpg" style=3D"outline:none; text-decoration:none; -ms-int=
erpolation-mode:bicubic; border:none; max-width:100%; font-size:16px" width=
=3D"100" align=3D"middle" srcset=3D"https://email.wordfence.com/hs-fs/hubfs=
/wf-stacked-care-3.jpg?upscale=3Dtrue&amp;width=3D200&amp;upscale=3Dtrue&am=
p;name=3Dwf-stacked-care-3.jpg 100w, https://email.wordfence.com/hs-fs/hubf=
s/wf-stacked-care-3.jpg?upscale=3Dtrue&amp;width=3D400&amp;upscale=3Dtrue&a=
mp;name=3Dwf-stacked-care-3.jpg 200w" sizes=3D"(max-width: 100px) 100vw, 10=
0px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-5" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-5-0" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-5-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"border-collapse:collapse=
; mso-line-height-rule:exactly; font-family:Arial, sans-serif; color:#52535=
5; word-break:break-word; text-align:center; padding:10px 20px; font-size:0=
px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3qgyTW7Y8-PT6lZ3mdW1p0DYr7d5BNsW2wxb=
zL824WHFN2nFnMYhxVYHW1YKH8D5ynTtJW3yFfQM6DlgPGW2RWWsB6CvWjbW1TN2sT2MFwLcVwb=
TrW6cdGhSW1bPR_92nb0_FW4LWx9l574vvkW7sdl7t9b9ZqZW1VF4ck5ymzVKW4TYFmV5R3-psW=
24H0NQ7T8f5qW5VkGcT70YZtTN8SXs0rHVw58VBdtyB97hqxHVRjVNB6bkwWbW7_lTMs5cVQvQW=
5wcmCJ33CRHDW2CnkV_25fmWNVwBt7573DXwjW2frG_c9lb2hKW3NY-9G3Dz9GyW1Y8MDH3M79B=
RW2h4h3Z6Lyd2rf5BmbzR04" target=3D"_blank" style=3D"color:#00a4bd; mso-line=
-height-rule:exactly" data-hs-link-id=3D"2">
        <img alt=3D"wf-stacked-response-2" src=3D"https://email.wordfence.c=
om/hs-fs/hubfs/wf-stacked-response-2.jpg?width=3D200&amp;upscale=3Dtrue&amp=
;name=3Dwf-stacked-response-2.jpg" style=3D"outline:none; text-decoration:n=
one; -ms-interpolation-mode:bicubic; border:none; max-width:100%; font-size=
:16px" width=3D"100" align=3D"middle" srcset=3D"https://email.wordfence.com=
/hs-fs/hubfs/wf-stacked-response-2.jpg?upscale=3Dtrue&amp;width=3D200&amp;u=
pscale=3Dtrue&amp;name=3Dwf-stacked-response-2.jpg 100w, https://email.word=
fence.com/hs-fs/hubfs/wf-stacked-response-2.jpg?upscale=3Dtrue&amp;width=3D=
400&amp;upscale=3Dtrue&amp;name=3Dwf-stacked-response-2.jpg 200w" sizes=3D"=
(max-width: 100px) 100vw, 100px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
<!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-5-1" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-5-1-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"border-collapse:collapse=
; mso-line-height-rule:exactly; font-family:Arial, sans-serif; color:#52535=
5; word-break:break-word; text-align:center; padding:10px 20px; font-size:0=
px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g4g3qgyTW7Y8-PT6lZ3nQN64CnCtNhl_3VVhNMJ=
3ZC4_PW3PjD2Y8rS6rzW5ZfwPM59BBSdW1mMTqp1d4qb9W2LHJQ75GK6HpW4nwkr41FlrT0N6KG=
QVPvN40jW5Jcm3l8y1VPdW1m522C7p1CnqW776gp54NDPKlW45MxMl36pDQ-W1CPsG753Rc32N5=
S-0tQJWrn3W4GKdZY2HzKWDW8HHDFR6HtvL6W6kQxWF269LX3W18bvdN6Jy9zcW91yPqr74238N=
W7LYvx_6g86yBVTFcj819wQR-W62gvHB9cSXshN6whd-VYZZMJW3V20d76LQrMZW9jvC1058fc6=
VW4BG2z47J5QSQf59SBhl04" target=3D"_blank" style=3D"color:#00a4bd; mso-line=
-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"wf-stacked-cli" src=3D"https://email.wordfence.com/hs-f=
s/hubfs/wf-stacked-cli.png?width=3D200&amp;upscale=3Dtrue&amp;name=3Dwf-sta=
cked-cli.png" style=3D"outline:none; text-decoration:none; -ms-interpolatio=
n-mode:bicubic; border:none; max-width:100%; font-size:16px" width=3D"100" =
align=3D"middle" srcset=3D"https://email.wordfence.com/hs-fs/hubfs/wf-stack=
ed-cli.png?upscale=3Dtrue&amp;width=3D200&amp;upscale=3Dtrue&amp;name=3Dwf-=
stacked-cli.png 100w, https://email.wordfence.com/hs-fs/hubfs/wf-stacked-cl=
i.png?upscale=3Dtrue&amp;width=3D400&amp;upscale=3Dtrue&amp;name=3Dwf-stack=
ed-cli.png 200w" sizes=3D"(max-width: 100px) 100vw, 100px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
<!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-5-2" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-5-2-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"border-collapse:collapse=
; mso-line-height-rule:exactly; font-family:Arial, sans-serif; color:#52535=
5; word-break:break-word; text-align:center; padding:10px 20px; font-size:0=
px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3-3qgyTW7lCdLW6lZ3m7W76qjrj3s5nzgW1Slb=
LG8PK-HvW63s86d1-wjh_W3fZ3x82Q3lLcW3ncZyr351t1WN1nKqbPhrR7TW1phl1j8TqGnQV2C=
4qS3gftVDW77DLGY4FL0hWW89ZMG94K0FqDW5t-8SF7HQt1KW2kbJ5N5p2_53W9fW6jM5Dj40hW=
5w1fC27mByN-VWwP0d9dmmdRW4tlDKb5h4B4rW72gfz78hPnPGN3sx1jdP32GYW1tJj4C2F8XXc=
W4jghVl51g9V0W940ffY66Bt4LN47lwcbSyL8QW1MJXKt2VXs4LW60hvsf1L-3WQf3FT7T004" =
target=3D"_blank" style=3D"color:#00a4bd; mso-line-height-rule:exactly" dat=
a-hs-link-id=3D"0">
        <img alt=3D"wf-stacked-intelligence" src=3D"https://email.wordfence=
.com/hs-fs/hubfs/wf-stacked-intelligence.png?width=3D200&amp;upscale=3Dtrue=
&amp;name=3Dwf-stacked-intelligence.png" style=3D"outline:none; text-decora=
tion:none; -ms-interpolation-mode:bicubic; border:none; max-width:100%; fon=
t-size:16px" width=3D"100" align=3D"middle" srcset=3D"https://email.wordfen=
ce.com/hs-fs/hubfs/wf-stacked-intelligence.png?upscale=3Dtrue&amp;width=3D2=
00&amp;upscale=3Dtrue&amp;name=3Dwf-stacked-intelligence.png 100w, https://=
email.wordfence.com/hs-fs/hubfs/wf-stacked-intelligence.png?upscale=3Dtrue&=
amp;width=3D400&amp;upscale=3Dtrue&amp;name=3Dwf-stacked-intelligence.png 2=
00w" sizes=3D"(max-width: 100px) 100vw, 100px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-6" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-6-0" class=3D"hse-column hse-size-12">
  <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D=
"100%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-=
table-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" =
style=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-famil=
y:Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; =
padding:10px 20px"><div id=3D"hs_cos_wrapper_module-6-0-0" class=3D"hs_cos_=
wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color: i=
nherit; font-size: inherit; line-height: inherit;" data-hs-cos-general-type=
=3D"widget" data-hs-cos-type=3D"module"><!--[if gte mso 9]>
<div style=3D"line-height: 0; font-size: 0px">
  <v:rect xmlns:v=3D"urn:schemas-microsoft-com:vml" fill=3D"true" stroke=3D=
"false" style=3D"width:560px; height:2pt;" fillcolor=3D"none">
    <v:fill type=3D"tile"/>
    <v:textbox inset=3D"0,0,0,0">
      <div>
<![endif]-->
<table role=3D"presentation" width=3D"100%" align=3D"center" border=3D"0" s=
tyle=3D"position:relative; top:-1px; min-width:20px; width:100%; max-width:=
100%; border-spacing:0; mso-table-lspace:0pt; mso-table-rspace:0pt; border-=
collapse:collapse; font-size:1px">
  <tbody><tr><td width=3D"100%" valign=3D"middle" style=3D"border-collapse:=
collapse; mso-line-height-rule:exactly; font-family:Arial, sans-serif; font=
-size:15px; color:#525355; word-break:break-word; line-height:0; border:tra=
nsparent; border-bottom:2px solid #EEEEEE; mso-border-bottom-alt:2pt solid =
#EEEEEE; border-bottom-width:2px"><!--[if mso 16]>&nbsp;<![endif]--></td></=
tr>
</tbody></table>
<!--[if gte mso 9]>
      </div>
    </v:textbox>
  </v:rect>
</div>
<![endif]--></div></td></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-7" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:400px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"400" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:400px">
<![endif]-->
<div id=3D"column-7-0" class=3D"hse-column hse-size-8">
  <div id=3D"hs_cos_wrapper_module-7-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td align=3D"left" valign=3D"top" style=3D"border-collapse:collapse; =
mso-line-height-rule:exactly; font-family:Arial, sans-serif; color:#525355;=
 word-break:break-word; text-align:left; padding:20px 20px 0px; font-size:0=
px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3H3qgyTW6N1vHY6lZ3pyW1FvF-51mnNHZW5J9H=
6W5Q4L5YW595dSk8gNDxyW49ZzVB2rRdnSW22jlbS9gYYhHW6hpbth5yzKx3W4WDQG91f3RG7W7=
M5tP81YTb6fVhkJZh19zxn9N73Td95g38Q5W59X2TS6YZD1_W8dqJsH2hLJ_5W7qn2_-5HzJwNW=
1dYB937Vp3X0W176xbp5ycPGKW4LFFyw7r753_W56qDdW1Y7Bh3W3kr41H2skHfbW7tg6R41VYr=
_6W7V8Lkb1_zK5wW4jKT993ByJGhW86vv_S79_WSnf2wnrw204" target=3D"_blank" style=
=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"logo-defiant" src=3D"https://email.wordfence.com/hs-fs/=
hubfs/logo-defiant.png?width=3D200&amp;upscale=3Dtrue&amp;name=3Dlogo-defia=
nt.png" style=3D"outline:none; text-decoration:none; -ms-interpolation-mode=
:bicubic; border:none; max-width:100%; font-size:16px" width=3D"100" align=
=3D"middle" srcset=3D"https://email.wordfence.com/hs-fs/hubfs/logo-defiant.=
png?upscale=3Dtrue&amp;width=3D200&amp;upscale=3Dtrue&amp;name=3Dlogo-defia=
nt.png 100w, https://email.wordfence.com/hs-fs/hubfs/logo-defiant.png?upsca=
le=3Dtrue&amp;width=3D400&amp;upscale=3Dtrue&amp;name=3Dlogo-defiant.png 20=
0w" sizes=3D"(max-width: 100px) 100vw, 100px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
<div id=3D"hs_cos_wrapper_module-7-0-1" class=3D"hs_cos_wrapper hs_cos_wrap=
per_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size: =
inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-hs=
-cos-type=3D"module"><table role=3D"presentation" class=3D"hse-footer hse-s=
econdary" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"borde=
r-spacing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso=
-table-rspace:0pt; font-family:Arial, sans-serif; font-size:12px; line-heig=
ht:135%; color:#23496d; margin-bottom:0; padding:0">
  <tbody>
    <tr>
      <td align=3D"left" valign=3D"top" style=3D"border-collapse:collapse; =
mso-line-height-rule:exactly; font-family:Arial, sans-serif; font-size:15px=
; color:#525355; word-break:break-word; text-align:left; margin-bottom:0; l=
ine-height:135%; padding:10px 20px">
          <p style=3D"mso-line-height-rule:exactly">Defiant, Inc., 1700 Wes=
tlake Ave N STE 200&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly">Seattle, WA &nbsp;98109&nbsp;Unit=
ed States</p>
<p style=3D"mso-line-height-rule:exactly"><a href=3D"https://email.wordfenc=
e.com/hs/manage-preferences/unsubscribe-all?languagePreference=3Den&amp;d=
=3DVnbTNd892TtnVCnbkg45v0QyW3_X4wv3SXQ-tW4h29fm6J4V3XVmWFdM7QhKh0N8fj51q25t=
FfW8S3DpZ7b4zN3VX4l0r6gWGZ4MXk_7Qbw8lHW2fGLrv63dwCqW6Mh43-3gNS_C3kg-2&amp;v=
=3D3&amp;utm_campaign=3DWordfence%20Intelligence%20Marketing&amp;utm_source=
=3Dhs_email&amp;utm_medium=3Demail&amp;utm_content=3D285092561&amp;_hsenc=
=3Dp2ANqtz-_JetaXRVPXidqmL7AAijXySttfYZB5kGk-eec9xWNYbPEoJ3amXb8F9mfbUTfRsv=
mHESOEmG9HCoSu1QpDikA70AtKRQ&amp;_hsmi=3D285092561" data-unsubscribe=3D"tru=
e" style=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D=
"0" target=3D"_blank">Unsubscribe</a> <a href=3D"https://email.wordfence.co=
m/hs/manage-preferences/unsubscribe?languagePreference=3Den&amp;d=3DVnbTNd8=
92TtnVCnbkg45v0QyW3_X4wv3SXQ-tW4h29fm6J4V3XVmWFdM7QhKh0N8fj51q25tFfW8S3DpZ7=
b4zN3VX4l0r6gWGZ4MXk_7Qbw8lHW2fGLrv63dwCqW6Mh43-3gNS_C3kg-2&amp;v=3D3&amp;u=
tm_campaign=3DWordfence%20Intelligence%20Marketing&amp;utm_source=3Dhs_emai=
l&amp;utm_medium=3Demail&amp;utm_content=3D285092561&amp;_hsenc=3Dp2ANqtz-_=
JetaXRVPXidqmL7AAijXySttfYZB5kGk-eec9xWNYbPEoJ3amXb8F9mfbUTfRsvmHESOEmG9HCo=
Su1QpDikA70AtKRQ&amp;_hsmi=3D285092561" data-unsubscribe=3D"true" style=3D"=
color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0" target=
=3D"_blank">Manage Preferences</a></p>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
<!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-7-1" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-7-1-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"border-collapse:collapse=
; mso-line-height-rule:exactly; font-family:Arial, sans-serif; color:#52535=
5; word-break:break-word; text-align:center; padding:10px 20px; font-size:0=
px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VWsPt=
F8B_z38N62HkhXr2BGdW67tPB756FKqkN880g3-3qgyTW7lCdLW6lZ3q4W241wrT1lNCW6W2-xT=
9g6khn27W2MT4Xr70TqNLW915kvB76TBsYW9dRXdH3qFZf3W8HFD2t95kSvrW7SYS3-982xbCW5=
CHmSR3pN7WNW3xWmT46dXVq5W169zm58sTqzQW647nLW3b0XnrW1mPk-q4t6SRnW3lKxdn2TgQY=
sW5KJbvm2Y9zQ7W88YtGB4J67CxN7dTQGvV2ZQNVlSqb476l-ltW69DmkY70KVrxW6ydYTH8cT8=
vbN1pHb5Ytxrv7W3L0lYC7csRS9W2v4p1k4C1dfcVjHcP51HJfqqW8Wfmw95pY0vjdN4QyK04" =
target=3D"_blank" style=3D"color:#00a4bd; mso-line-height-rule:exactly" dat=
a-hs-link-id=3D"0">
        <img alt=3D"ISO_27001" src=3D"https://email.wordfence.com/hs-fs/hub=
fs/ISO_27001.png?width=3D140&amp;upscale=3Dtrue&amp;name=3DISO_27001.png" s=
tyle=3D"outline:none; text-decoration:none; -ms-interpolation-mode:bicubic;=
 border:none; max-width:100%; font-size:16px" width=3D"70" align=3D"middle"=
 srcset=3D"https://email.wordfence.com/hs-fs/hubfs/ISO_27001.png?upscale=3D=
true&amp;width=3D140&amp;upscale=3Dtrue&amp;name=3DISO_27001.png 70w, https=
://email.wordfence.com/hs-fs/hubfs/ISO_27001.png?upscale=3Dtrue&amp;width=
=3D280&amp;upscale=3Dtrue&amp;name=3DISO_27001.png 140w" sizes=3D"(max-widt=
h: 70px) 100vw, 70px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-8" class=3D"hse-section hse-section-last" style=3D"pad=
ding-left:10px; padding-right:10px; padding-bottom:20px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border-bottom hse-border" styl=
e=3D"min-width:280px; max-width:600px; width:100%; Margin-left:auto; Margin=
-right:auto; border-collapse:collapse; border-spacing:0; border-left:0px so=
lid #008cc1; border-right:0px solid #008cc1; box-sizing:border-box; border-=
bottom:0px solid #008cc1; background-color:#FFFFFF" bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-bottom:0px solid #008CC1;=
border-left:0px solid #008CC1;border-right:0px solid #008CC1" cellpadding=
=3D"0" cellspacing=3D"0" role=3D"presentation" class=3D"hse-border-bottom h=
se-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-8-0" class=3D"hse-column hse-size-12">
  <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D=
"100%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-=
table-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" =
style=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-famil=
y:Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; =
padding:10px 20px"><div id=3D"hs_cos_wrapper_module-8-0-0" class=3D"hs_cos_=
wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color: i=
nherit; font-size: inherit; line-height: inherit;" data-hs-cos-general-type=
=3D"widget" data-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapper_module-8-=
0-0_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_ric=
h_text" style=3D"color: inherit; font-size: inherit; line-height: inherit;"=
 data-hs-cos-general-type=3D"widget" data-hs-cos-type=3D"rich_text"><p styl=
e=3D"mso-line-height-rule:exactly; font-size:11px; line-height:175%; text-a=
lign:center" align=3D"center">You're receiving this email because you signe=
d up to the Wordfence WordPress security mailing list.</p></div></div></td>=
</tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
</div>
          </td>
        </tr>
      </tbody></table>
    </div>
 =20
<img src=3D"https://email.wordfence.com/e3t/Cto/GC+113/cwG7R04/VWsPtF8B_z38=
N62HkhXr2BGdW67tPB756FKqkW880fRN3D2Fr7122" alt=3D"" width=3D"1" height=3D"1=
" border=3D"0" style=3D"display:none!important;min-height:1px!important;wid=
th:1px!important;border-width:0!important;margin-top:0!important;margin-bot=
tom:0!important;margin-right:0!important;margin-left:0!important;padding-to=
p:0!important;padding-bottom:0!important;padding-right:0!important;padding-=
left:0!important"></body></html>
------=_Part_11119761_1383759079.1701704118381--

