Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease!, CVE-2019-13575

CVE, Research URL: CVE-2019-13575
Home page URL: Security reports for Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease!
Application: Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease!
Published on: Jul 18, 2019
Research Description: A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/evf-entry-functions.php
Affected versions: Min -, max 1.5.0.
Status: vulnerable