| Package | Affected versions | Patched versions |
|---|---|---|
| ultimate-form-builder-lite | ≤ 1.3.6 |
The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free