PT-2026-43058

Name of the Vulnerable Software and Affected Versions WordPress Contact Form Maker Plugin version 1.12.20 Description Authenticated attackers can manipulate database queries through the 'FormMakerSQLMapping' and 'generete csv fmc' AJAX actions. By injecting malicious SQL code via the name and...

PT-2026-43057

Name of the Vulnerable Software and Affected Versions WordPress Form Maker Plugin versions prior to 1.12.25 Description Authenticated attackers can manipulate database queries by injecting SQL code through the 'FormMakerSQLMapping' and 'generete csv' actions. This is achieved by submitting POST...