https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:19:52.030184+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-321523 EUVD-2026-321523 2026-10-08T22:19:52.082788+00:00 EUVD-2026-321523 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25347 fkie_cve-2018-25347 2026-10-08T22:19:52.082834+00:00

WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMakerSQLMapping and generete_csv_fmc AJAX actions. Attackers can inject malicious SQL code via the 'name' and 'search_labels' parameters to extract sensitive database information or escalate privileges.

 https://cve.radiocsirt.org/vuln/ghsa-pm55-93cr-mxp6 GHSA-pm55-93cr-mxp6 2026-10-08T22:19:52.082870+00:00

WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMakerSQLMapping and generete_csv_fmc AJAX actions. Attackers can inject malicious SQL code via the 'name' and 'search_labels' parameters to extract sensitive database information or escalate privileges.