Skip to content
OpenAdvisories
High · 7.6 CVE-2024-32134 EUVD-2024-29955GHSA-4hm4-45mw-2qr2

WordPress Forms to Zapier plugin <= 1.1.12 - Auth. SQL Injection vulnerability

Published Apr 15, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Nasir Ahmed Product: Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nasirahmed Forms to Zapier, Integromat, IFTTT, Workato, Automate.Io, elastic.Io, Built.Io, APIANT, Webhook.This issue affects Forms to Zapier, Integromat, IFTTT, Workato, Automate.Io, elastic.Io, Built.Io, APIANT, Webhook: from n/a through 1.1.12.

Affected products

VendorProductAffectedFixed
Nasirahmed Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook ≤ 1.1.12 —

References