CVE-2015-7806

Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-10-17

Last modified

2024-08-06

Weaknesses

CWE-77

Affected products

• Form Manager (Form Manager Project)

References

• http://appcheck-ng.com/remote-command-execution-in-wordpress-form-manager-plugin-cve-2015-7806/
• https://plugins.trac.wordpress.org/changeset/1264145
• https://wpvulndb.com/vulnerabilities/8220