| Package | Affected versions | Patched versions |
|---|---|---|
| cformsii | < 14.13 | 14.13 |
The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free