SQL Injection Vulnerability in Ultimate Addons for Contact Form 7 Plugin by WordPress
CVE-2023-1615
8.8HIGH
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 9 June 2023
What is CVE-2023-1615?
The Ultimate Addons for Contact Form 7 plugin for WordPress is susceptible to SQL Injection through the 'id' parameter in versions up to and including 3.1.23. This vulnerability enables authenticated attackers with any level of authorization to inject additional SQL queries into existing queries, potentially leading to unauthorized access to sensitive information stored within the database.
Affected Version(s)
Ultimate Addons for Contact Form 7 3.1.23