Filtered by vendor Wow-company Subscriptions
Filtered by product Wow Forms Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-24628 1 Wow-company 1 Wow Forms 2021-11-10 7.2 High
The Wow Forms WordPress plugin through 3.1.3 does not sanitise or escape a 'did' GET parameter before using it in a SQL statement, when deleting a form in the admin dashboard, leading to an authenticated SQL injection