Description The buddyforms plugin before 2.2.8 for WordPress has SQL injection. References https://wordpress.org/plugins/buddyforms/#developers https://wpvulndb.com/vulnerabilities/9829