Skip to content
OpenAdvisories

Vendor

hancock11

3 known vulnerabilities.

Products

WP Forms Connector 2 Appy Pie Connect for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-9178

    WP Forms Connector <= 1.8 - Missing Authorization to Unauthenticated Information Exposure via 'user/list' REST Endpoint

    The WP Forms Connector plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.8. The plugin registers the REST route wp/v3/user/list/<id> (callback userDetail()) with permission_callback set to '__return_true', and …

    hancock11 WP Forms Connector Web / CMS
  • High 7.5
    CVE-2026-9179

    WP Forms Connector <= 1.8 - Unauthenticated SQL Injection via 'order' Parameter

    The WP Forms Connector plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/wp/v3/post/list REST endpoint in versions up to and including 1.8. This is due to insufficient escaping on the user-supplied 'order' parameter…

    hancock11 WP Forms Connector Web / CMS