← Back to CVE List

CVE-2019-17072

Published: 2019-10-10T12:10Z
Last Modified: 2024-11-21T04:31Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt