Skip to content
OpenAdvisories

Product · 10web

Form Maker

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2018-25346

    WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php

    WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code through the FormMakerSQLMapping and generete_csv actions. Attackers can submit POST re…

    10web Form Maker