Critical severity9.8NVD Advisory· Published Sep 14, 2017· Updated May 13, 2026

CVE-2017-1002027

Description

Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being passed into an SQL query in file ./rk-responsive-contact-form/include/rk_user_list.php.

Affected products

rkdevelopers/rk-responsive-contact-formv5
Range: unspecified
Rayanehdownload/Rk Responsive Contact Form
cpe:2.3:a:rayanehdownload:rk-responsive-contact-form:1.0:*:*:*:*:wordpress:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.vapidlabs.com/advisory.phpnvdExploitPatchThird Party Advisory
wordpress.org/plugins/rk-responsive-contact-form/nvdProductThird Party Advisory
wpvulndb.com/vulnerabilities/8889nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000