High · 8.5 CVE-2024-30242 EUVD-2024-28173GHSA-wjw7-pmq5-rw6m

WordPress Contact Form to Any API plugin <= 1.1.8 - Auth. SQL Injection vulnerability

Published Mar 28, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: IT Path Solutions Product: Contact Form to Any API

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IT Path Solutions Contact Form to Any API.This issue affects Contact Form to Any API: from n/a through 1.1.8.

Affected products

Vendor	Product	Affected	Fixed
IT Path Solutions	Contact Form to Any API	≤ 1.1.8	—

References

https://patchstack.com/database/vulnerability/contact-form-to-any-api/wordpress-contact-form-to-any-api-plugin-1-1-8-subscriber-sql-injection-vulnerability?_s_id=cve vdb-entry