CVE-2015-9234

The CP Contact Form with PayPal WordPress plugin (before 1.1.6) suffers a SQL injection via the cp_contactformpp_id parameter to cp_contactformpp.php. Exploitation is described across multiple sources; affected are versions prior to 1.1.6. Impact per CVE indicates partial confidentiality, integri...