SQL Injection Vulnerability in Aman Views for WPForms Plugin
CVE-2026-42742

8.5HIGH

Key Information:

Vendor

WordPress
Status
Views For WPforms
Vendor
CVE Published:
12 May 2026

What is CVE-2026-42742?

A vulnerability exists in the Aman Views for WPForms plugin for WordPress that allows attackers to execute blind SQL injection attacks. This issue can enable unauthorized access to sensitive data by manipulating SQL queries, posing significant risks to the security of databases. The affected version spans from n/a up to 3.4.6, highlighting the importance for users to update their plugin to mitigate potential threats.

Affected Version(s)

Views for WPForms 0 <= 3.4.6

References

https://patchstack.com/database/Wordpress/Plugin/views-fo...
vdb-entry

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

dodoh4t | Patchstack Bug Bounty Program
.