cleantalk
Vulnerabilities and Security Researches

NEX-Forms – Ultimate Form Builder – Contact forms and much more, 47456e0f22cdd654b652e87f4ae231837a50279c

Published on
Jul 16, 2015
Research Description
NEX-Forms &#8211; Ultimate Forms Plugin for WordPress [nex-forms-express-wp-form-builder] < 4.6.1 WordPress NEX-Forms Plugin <= 4.0 - Blind SQL Injection Because of this vulnerability, unauthenticated attackers and authenticatged users can inject arbitrary SQL commands. Upgrade the plugin.
Affected versions
max 4.6.1.
Status
vulnerable