CVE-2019-17072

The new-contact-form-widget aka Contact Form Widget - Contact Query, Form Maker plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php...

CVE-2019-17072

The CVE-2019-17072 entry concerns the WordPress plugin new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) at version 1.0.9 . The vulnerability is an SQL Injection via all-query-page.php in this plugin. The connected documents confirm the affected component and the under...