CVE-2017-18570

—

CVSS 3.0

9.8 critical

EPSS

2%p77

Published

Aug 22, 2019 (Aug 22, 2019)

Modified

Jun 17, 2026

Description

The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.

Vendors: cformsii project
Products: cformsii
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.