PT-2022-22403 · WordPress · Wp Libre Form

Name of the Vulnerable Software and Affected Versions: WP Libre Form plugin versions 2.0.0 through 2.0.8 Description: The issue allows attackers to disclose sensitive information and perform unauthorized actions, such as listing and deleting submissions, without proper authentication...

PT-2022-12998

Name of the Vulnerable Software and Affected Versions Fork CMS versions prior to 5.11.1 Description The issue concerns a SQL injection vulnerability. When deleting submissions that belong to a form created with the FormBuilder module, the parameter id is vulnerable to SQL injection. Recommendatio...