Skip to content
OpenAdvisories
High · 7.6 CVE-2023-32741 EUVD-2023-36966GHSA-qgj5-fp5w-7cxr

WordPress Contact Form to Any API Plugin <= 1.1.2 is vulnerable to SQL Injection

Published Nov 3, 2023 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IT Path Solutions PVT LTD Contact Form to Any API allows SQL Injection.This issue affects Contact Form to Any API: from n/a through 1.1.2.

Affected products

VendorProductAffectedFixed
IT Path Solutions PVT Contact Form to Any API ≤ 1.1.2 —

References