Lucene search
MitreCVELIST:CVE-2019-13575HistoryJul 18, 2019 - 2:51 p.m.
CVE-2019-13575
2019-07-1814:51:50
mitre
www.cve.org
3
EPSS
0.003
Percentile
66.0%
A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/evf-entry-functions.php
References
fortiguard.com/zeroday/FG-VD-19-096
github.com/wpeverest/everest-forms/commit/755d095fe0d9a756a13800d1513cf98219e4a3f9
github.com/wpeverest/everest-forms/commit/755d095fe0d9a756a13800d1513cf98219e4a3f9#diff-bb2b21ef7774df8687ff02b0284505c6
wordpress.org/plugins/everest-forms/#developers
wpvulndb.com/vulnerabilities/9466
Related
openvas
openvas
WordPress Everest Forms Plugin < 1.5.0 SQL Injection Vulnerability
2019-07-19 00:00:00
osv
osv
CVE-2019-13575
2019-07-18 15:15:11
cve
cve
CVE-2019-13575
2019-07-18 15:15:11
wpvulndb
wpvulndb
Everest Forms <= 1.4.9 - SQL Injection
2019-07-18 00:00:00
nvd
nvd
CVE-2019-13575
2019-07-18 15:15:11
prion
prion
Sql injection
2019-07-18 15:15:00
patchstack
patchstack
WordPress Everest Forms plugin <= 1.4.9 - SQL Injection (SQLi) vulnerability
2019-07-19 00:00:00