high7.2
CVE-2022-3764
The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.
Impact
The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpvibes | Form Vibes | before 1.4.6 |