Security Advisory

CVE-2017-18570

9.8
CRITICAL

Vulnerability Description

The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.
Published Date August 22, 2019
Official Source NIST NVD Advisory