VulnCheck KEV: CVE-2017-15919

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php...

Contact Form for WordPress – Ultimate Form Builder Lite plugin <= 1.3.2 - Authenticated Cross-Site Scripting (XSS)

Contact Form for WordPress – Ultimate Form Builder Lite 1.3.2 WordPress plugin and earlier its versions suffers from Authenticated Cross-Site Scripting XSS vulnerability. Patched version 1.3.3 already available. Solution Update plugin to the latest available version at least 1.3.3...