Skip to content
OpenAdvisories

Product · codepeople

Form Builder CP

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-13680

    Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection

    The Form Builder CP plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'CP_EASY_FORM_WILL_APPEAR_HERE' shortcode in all versions up to, and including, 1.2.41 due to insufficient escaping on the user supplied parameter and lack o…

    codepeople Form Builder CP Web / CMS