SQL Injection Vulnerability in CP Contact Form with PayPal Plugin for WordPress
CVE-2015-9234

7.2HIGH

Key Information:

Vendor: Wordpress
Status: Cp Contact Form With Paypal
Vendor: CVE Published:; 30 September 2017

What is CVE-2015-9234?

The CP Contact Form with PayPal plugin for WordPress earlier than version 1.1.6 is susceptible to an SQL injection attack via the cp_contactformpp_id parameter in cp_contactformpp.php. This vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized access to sensitive database information. Website owners using this plugin should update to the latest version to mitigate risks associated with this security flaw.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch