Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Contact Form to Any API 1.1.2

  • Severity: high-risk
  • Status: Fixed
  • Publication: July 17, 2023

The Contact Form to Any API plugin for WordPress has a security vulnerability that affects users who have version 1.1.2 or earlier of the plugin installed. If an attacker with administrator-level access is able to exploit this vulnerability, they could extract sensitive information from the database by adding extra SQL commands to existing queries. This vulnerability is caused by insufficient escaping on user-supplied parameters and lack of preparation on the SQL query.

Detected in:

Contact Form to Any API fixed vulnerable versions: >= * <= 1.1.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.