WordPress Ultimate Form Builder Lite Plugin 'wp-admin/admin-ajax.php' SQL Injection Vulnerability

Bugtraq ID: 101604
Class: Input Validation Error
CVE: CVE-2017-15919
Remote: Yes
Local: No
Published: Oct 26 2017 12:00AM
Updated: Nov 22 2017 01:07AM
Credit: WordFence Security Team.
Vulnerable: WordPress ultimate-form-builder-lite 1.3.6
WordPress ultimate-form-builder-lite 1.3.5
WordPress ultimate-form-builder-lite 1.3.4
WordPress ultimate-form-builder-lite 1.3.3
WordPress ultimate-form-builder-lite 1.3.2
WordPress ultimate-form-builder-lite 1.3.1
WordPress ultimate-form-builder-lite 1.3
Not Vulnerable: WordPress ultimate-form-builder-lite 1.3.7


 

Privacy Statement
Copyright 2010, SecurityFocus