Skip to content
OpenAdvisories
High · 7.6 CVE-2023-52135 EUVD-2023-56809GHSA-3f3f-5w2h-wvgq

WordPress WS Form LITE Plugin <= 1.9.170 is vulnerable to SQL Injection

Published Dec 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WS Form Product: WS Form LITE – Drag & Drop Contact Form Builder for WordPress Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WS Form WS Form LITE – Drag & Drop Contact Form Builder for WordPress.This issue affects WS Form LITE – Drag & Drop Contact Form Builder for WordPress: from n/a through 1.9.170.

Affected products

VendorProductAffectedFixed
WS Form WS Form LITE – Drag & Drop Contact Form Builder for WordPress ≤ 1.9.170 —

References