Log out
Get PRO

Latest

Input validation vulnerability in Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress 1.7.2

  • Severity: critical
  • Status: Fixed
  • Publication: June 5, 2024

The Contact Form to DB plugin for WordPress has a vulnerability that allows hackers to access sensitive information from the database. This is because the plugin does not properly protect against SQL Injection, which means that unauthorized users can add their own queries to the existing ones and retrieve confidential data. This vulnerability affects all versions of the plugin up to 1.7.2.

Detected in:

Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress fixed vulnerable versions: >= * <= 1.7.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.