Lucene search
WpvulndbWPVDB-ID:BA3D8621-A243-4D34-8378-882A20464CC8HistoryJun 08, 2023 - 12:00 a.m.
Ultimate Addons for Contact Form 7 3.1.23 - Subscriber+ SQLi
2023-06-0800:00:00
wpscan.com
4
plugin
sanitisation
sql injection
authenticated users
subscribers
0.002 Low
EPSS
Percentile
58.7%
The plugin does not properly sanitise and escape the id parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers
| CPE | Name | Operator | Version |
|---|---|---|---|
| ultimate-addons-for-contact-form-7 | lt | 3.1.24 |
Related
cvelist
cvelist
CVE-2023-1615
2023-06-09 05:33:22
wpvulndb
wpvulndb
Ultimate Addons for Contact Form 7 < 3.1.24 - Subscriber+ SQL Injection
2023-06-08 00:00:00
prion
prion
Sql injection
2023-06-09 06:15:00
nvd
nvd
CVE-2023-1615
2023-06-09 06:15:57
cve
cve
CVE-2023-1615
2023-06-09 06:15:57
wordfence
wordfence