Lucene search

K
patchstackFrancesco CarlucciPATCHSTACK:BA0B0BFA64F00922EB860B65F4D6E019
HistoryNov 15, 2022 - 12:00 a.m.

WordPress WPForms Pro premium plugin <= 1.7.6 - CSV Injection vulnerability

2022-11-1500:00:00
Francesco Carlucci
patchstack.com
189
wordpress
wpforms pro
csv injection
vulnerability
francesco carlucci
update

0.003 Low

EPSS

Percentile

68.8%

CSV Injection vulnerability discovered by Francesco Carlucci in WordPress WPForms Pro premium plugin (versions <= 1.7.6).

Solution

           Update the WordPress WPForms Pro plugin to the latest available version (at least 1.7.7).
CPENameOperatorVersion
wpforms prole1.7.6

0.003 Low

EPSS

Percentile

68.8%

Related for PATCHSTACK:BA0B0BFA64F00922EB860B65F4D6E019