Skip to content
OpenAdvisories
High · 7.2 CVE-2024-31077 EUVD-2024-28989GHSA-r95q-f4c4-7f24

Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with…

Published Apr 23, 2024 · Updated Aug 2, 2024 · Assigned by jpcert

Description

Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege may obtain and alter any information in the database and cause a denial-of-service (DoS) condition.

Affected products

VendorProductAffectedFixed
WPMU DEV Forminator prior to 1.29.3 —

References