Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:02:50 +0000 CVE-2018-25347 — WordPress Contact Form Maker Plugin 1.12.20 SQL Injection https://cve.radiocsirt.org/vuln/cve-2018-25347 <p><strong>Affected:</strong> web-dorado Contact Form Maker</p> <p>WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMakerSQLMapping and generete_csv_fmc AJAX actions. Attackers can inject malicious SQL code via the &#39;name&#39; and &#39;search_labels&#39; parameters to extract sensitive database information or escalate privileges.</p> <p><strong>Affected:</strong> web-dorado Contact Form Maker</p> <p>WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMakerSQLMapping and generete_csv_fmc AJAX actions. Attackers can inject malicious SQL code via the &#39;name&#39; and &#39;search_labels&#39; parameters to extract sensitive database information or escalate privileges.</p> https://cve.radiocsirt.org/vuln/cve-2018-25347