CVE-2013-7187

SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

4.78% chance of exploitation in the next 30 days, 92nd percentile

Published

2013-12-20

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/30002

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30002

Security advisories

• http://secunia.com/advisories/56044
• http://www.securityfocus.com/bid/64183

References

• CVE Record
• NVD entry