High · 7.6 CVE-2023-30872 EUVD-2023-35212GHSA-36cp-3699-pj66

WordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection

Published Dec 20, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: bannersky Product: BSK Forms Blacklist

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BannerSky BSK Forms Blacklist.This issue affects BSK Forms Blacklist: from n/a through 3.6.2.

Affected products

Vendor	Product	Affected	Fixed
BannerSky	BSK Forms Blacklist	≤ 3.6.2	—

References

https://patchstack.com/database/vulnerability/bsk-gravityforms-blacklist/wordpress-bsk-forms-blacklist-plugin-3-6-2-sql-injection-vulnerability?_s_id=cve vdb-entry