| Package | Affected versions | Patched versions |
|---|---|---|
| contact form widget | = 1.0.9 |
The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free