Skip to content
Threat Feed

Product

Form Maker Plugin <= 1.12.24

1 brief RSS
high threat

WordPress Form Maker Plugin SQL Injection Vulnerability (CVE-2018-25346)

WordPress Form Maker Plugin version 1.12.24 and below is vulnerable to SQL injection, allowing authenticated attackers to manipulate database queries through the FormMakerSQLMapping and generete_csv actions via crafted POST requests, potentially leading to data extraction, modification, or privilege escalation.

Form Maker Plugin <= 1.12.24 sqli wordpress plugin
2r 1t 1c