CVE-2023-31212

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue affects Database for Contact Form 7, WPforms, Elementor forms: from n/a through...

CVE-2023-31212

creationtimestamp| type| source ---|---|--- 2023-10-31 17:21:20+00:00| seen| Telegram/7xWz-Wi1tgEcOwwKlB7bDwspdfvffeIdsJGUi0NEgDUD8xY...

CVE-2023-31212

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue affects Database for Contact Form 7, WPforms, Elementor forms: from n/a through...

CVE-2023-31212

CVE-2023-31212 is a SQL Injection vulnerability affecting the WordPress plugin Contact Form Entries (and related variants) up to version 1.3.0. The issue arises from improper neutralization of inputs used in an SQL command, enabling injection under the plugin’s Authorized Contributor workflow. Pu...

WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to SQL Injection

Software Contact Form Entries Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-31212 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID e8d727f37fdc Credits Rafie Muhammad Patchstack Required privilege...