← All advisories

Critical severity9.8NVD Advisory· Published Aug 22, 2019· Updated Jun 17, 2026

CVE-2017-18570

CVE-2017-18570

Description

The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/cforms2 plugindescription
WordPress/Cforms2llm-fuzzy
Range: <14.13
Package: https://wordpress.org/plugins/cforms2
Deliciousdays/Cformsii
cpe:2.3:a:cformsii_project:cformsii:*:*:*:*:*:wordpress:*:*
Range: <14.13

Patches

Vulnerability mechanics

References

1

wordpress.org/plugins/cforms2/nvdRelease Notes

News mentions

0

No linked articles in our index yet.