CVE-2019-13575

A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/evf-entry-functions.php...

CVE-2019-13575

The CVE-2019-13575 entry describes a SQL injection in the WordPress plugin Everest Forms (WPEverest) up to version 1.4.9 via includes/evf-entry-functions.php. The underlying issue is improper handling/sanitization of user input that allows remote attackers to execute arbitrary SQL commands, with ...