← All advisories

Critical severity9.8NVD Advisory· Published Aug 27, 2019· Updated Jun 17, 2026

CVE-2018-21003

CVE-2018-21003

Description

The buddyforms plugin before 2.2.8 for WordPress has SQL injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Themekraft/Buddyforms
cpe:2.3:a:themekraft:buddyforms:*:*:*:*:*:wordpress:*:*
Range: <2.2.8
WordPress/buddyforms plugindescription
WordPress/Buddyformsllm-fuzzy
Range: <2.2.8
Package: https://wordpress.org/plugins/buddyforms

Patches

Vulnerability mechanics

References

2

wordpress.org/plugins/buddyforms/nvdRelease Notes
wpvulndb.com/vulnerabilities/9829nvdBroken Link

News mentions

0

No linked articles in our index yet.