Unknown Contact Form By WD vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Contact Form By WD, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2HighCVE-2023-2655unknown · contact form by wd +2 moreContact Form by WD <= 1.13.23 - Admin+ SQLiThe Contact Form by WD WordPress plugin through 1.13.23 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as adminEPSS0.93%