CVE-2022-3689

The CVE-2022-3689 entry concerns the WordPress HTML Forms plugin prior to version 1.3.25, where a parameter is not properly escaped before being used in an SQL statement, causing a SQL injection. The vulnerability is exploitable by high-privilege users and can lead to confidential data disclosure...