WordPress Plugin Vulnerabilities

Ultimate Form Builder Lite <= 1.3.7 - Multiple Vulnerabilities

Description

Authenticated XSS & SQL Injection.

Affects Plugins

Plugin icon
ultimate-form-builder-lite
Fixed in 1.3.8

References

URL
https://seclists.org/fulldisclosure/2018/Jun/34
URL
https://plugins.trac.wordpress.org/changeset/1889525/ultimate-form-builder-lite

Miscellaneous

Submitter
Ryan
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
2e2c4deb-6143-4e53-bf6c-8d53306b3526

Timeline

Publicly Published
2018-06-15 (about 7 years ago)
Added
2018-06-18 (about 7 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2019-05-25
Title
Related YouTube Videos <= 1.9.8 - CSRF & XSS
Published
2019-07-04
Title
Ocean Extra <= 1.5.8 - Unauthenticated Settings change and CSS injection
Published
2020-08-20
Title
Discount Rules for WooCommerce < 2.1.0 - Multiple Vulnerabilities
Published
2020-06-15
Title
KingComposer < 2.9.4 - Multiple Critical Issues
Published
2014-09-17
Title
Ready! Ecommerce 0.5.0 - CSRF & XSS