WordPress Plugin Vulnerabilities

A Forms 1.4.0 - a-forms.php a_form_tracking_page FunctionMultiple Parameters SQL Injection

Description

The A Forms WordPress plugin was affected by an a-forms.php a_form_tracking_page FunctionMultiple Parameters SQL Injection security vulnerability.

Affects Plugins

Plugin icon
a-forms
Fixed in 1.4.2

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
cc06d590-8bea-4b1b-8b91-fc0fc0dc690c

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2022-01-31
Title
TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection
Published
2025-06-03
Title
WPCHURCH <= 2.7.0 - Unauthenticated SQL Injection
Published
2021-03-26
Title
Quiz And Survey Master < 7.1.12 - Authenticated SQL injection via shortcode
Published
2015-06-04
Title
Users Ultra <= 1.5.15 - SQL Injection
Published
2024-12-05
Title
KiviCare – Clinic & Patient Management System (EHR) < 3.6.5 - Authenticated (Subscriber+) SQL Injection