CVE-2017-18497

CVE-2017-18497 affects the WordPress Liveforms plugin (pre-3.4.0). It is described as a cross-site scripting (XSS) vulnerability that could allow an attacker to execute client-side code in the context of a user visiting a site using the plugin.

CVE-2015-9301

CVE-2015-9301 affects the WordPress Live Forms plugin prior to version 3.2.0, where an SQL injection vulnerability exists in the plugin’s handling of user input. The issue is documented across multiple sources (NVD/NIST and Red Hat) and is associated with high-severity impact (NVD CVSS v3.0: 9.8,...