CVE-2015-7806: Improper Neutralization of Special Elements used in a Command

Eval injection vulnerability in the fmsaveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors...

WordPress Contact Form Manager CSRF / XSS

------------------------------------------------------------------------ Cross-Site Request Forgery & Cross-Site Scripting in Contact Form Manager WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...

Multiple Vulnerabilities in WordPress Contact Form Manager Plugin

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Cross-site scripting and cross-site request forgery vulnerabilities exist in the WordPress Contact Form Manager...

WordPress Contact Form Manager Plugin - Cross-Site Request Forgery / Cross-Site Scripting Vulnerabil

Exploit for php platform in category web applications !-- Source: https://sumofpwn.nl/advisory/2016/crosssiterequestforgerycrosssitescriptingincontactformmanagerwordpressplugin.html Abstract It was discovered that Contact Form Manager does not protect against Cross-Site Request Forgery. This allo...

Contact Form Manager - CSRF & Cross-Site Scripting (XSS)

The Contact Form Manager WordPress plugin was affected by a CSRF & Cross-Site Scripting XSS security vulnerability...

WordPress Plugin Contact Form Manager - Cross-Site Request Forgery Cross-Site Scripting

WordPress Plugin Contact Form Manager - Cross-Site Request Forgery Cross-Site Scripting !-- Source: https://sumofpwn.nl/advisory/2016/crosssiterequestforgerycrosssitescriptingincontactformmanagerwordpressplugin.html Abstract It was discovered that Contact Form Manager does not protect against...

WordPress Plugin Contact Form Manager - Cross-Site Request Forgery / Cross-Site Scripting

!-- Source: https://sumofpwn.nl/advisory/2016/crosssiterequestforgerycrosssitescriptingincontactformmanagerwordpressplugin.html Abstract It was discovered that Contact Form Manager does not protect against Cross-Site Request Forgery. This allows an attacker to change arbitrary Contact Form Manage...

Contact Form Manager <= 1.4.1 - Authenticated Reflected Cross-Site Scripting (XSS)

The Contact Form Manager WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Contact Form Manager Plugin <= 1.4.1 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

Form Manager <= 1.7.2 - Authenticated Remote Comm& Execution (RCE)

The wordpress-form-manager WordPress plugin was affected by an Authenticated Remote Comm& Execution RCE security vulnerability...