WordPress Plugin Custom Contact Forms Security Bypass (5.1.0.3)

Description

WordPress Plugin Custom Contact Forms is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to download and modify the database remotely or to upload files containing SQL statements which will be executed; this could lead to total compromise of the website. WordPress Plugin Custom Contact Forms version 5.1.0.3 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 5.1.0.4 or latest

References

Related Vulnerabilities

Severity

Classification

Tags