CVE Database /
CVE-2019-9568
CVE · Medium
CVE-2019-9568 — Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.6
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-9568
|
Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.6 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
Medium
6.5
|
< 1.6
|
1.6 |
2019-02-06 |
—
|
CVE-2019-9568
The Forminator plugin for WordPress versions before 1.6 contains a SQL injection vulnerability in the admin interface. An attacker with delete permissions can exploit this flaw by manipulating the entry[] parameter in wp-admin/admin.php?page=forminator-entries to inject arbitrary SQL commands. This allows an authenticated user with sufficient privileges to execute malicious database queries and potentially access or modify sensitive data.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings