CVE-2023-28663

The Formidable PRO2PDF WordPress Plugin, versions prior to 3.11, contains an authenticated SQL injection in the fieldmap parameter of the fpropdf_export_file action. The root cause is improper handling of the fieldmap input, enabling arbitrary SQL execution when authenticated. This affects the pl...