Security Advisory

CVE-2017-15919

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-10-26 18:00:00

Last updated 2024-08-05 20:04:50

Assigner mitre

CVSS score not scored

State PUBLISHED

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php.