Contact Form Widget – Contact Query, Contact Page, Form Maker, Query Table, CVE-2019-17072

CVE, Research URL: CVE-2019-17072
Home page URL: Security reports for Contact Form Widget – Contact Query, Contact Page, Form Maker, Query Table
Application: Contact Form Widget – Contact Query, Contact Page, Form Maker, Query Table
Published on: Oct 10, 2019
Research Description: The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php.
Affected versions: Min -, max 1.0.9.
Status: vulnerable

Contact Form Widget &#8211; Contact Query, Contact Page, Form Maker, Query Table, CVE-2019-17072