CVE-2017-1002027

Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being passed into an SQL query in file ./rk-responsive-contact-form/include/rk_user_list.php.

Score

CVSS 3.0 9.8 Critical

Status

Modified - larry0@me.com

Published

2017-09-14

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Rk-responsive-contact-form (Rayanehdownload)
• Rk-responsive-contact-form (Rkdevelopers)

References

• http://www.vapidlabs.com/advisory.php?v=198
• https://wordpress.org/plugins/rk-responsive-contact-form/
• https://wpvulndb.com/vulnerabilities/8889