The Multi Step for Contact Form plugin for WordPress is not secure in versions up to 2.7.7. This is because it does not properly protect against SQL Injection, which means that attackers can access sensitive information from the database by adding their own SQL queries. This vulnerability can be exploited by anyone, even if they are not logged in.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
