Description The cforms2 plugin before 14.6.10 for WordPress has SQL injection. References https://wordpress.org/plugins/cforms2/#developers https://wpvulndb.com/vulnerabilities/9773