Skip to content
OpenAdvisories
Critical · 9.3 Scanner template CVE-2024-38773 EUVD-2024-37613GHSA-6f6m-xj5v-j35q

WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability

Published Jul 22, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17.

Affected products

VendorProductAffectedFixed
Adrian Tobey FormLift for Infusionsoft Web Forms ≤ 7.5.17 —

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References