Web-Dorado Contact Form Maker vulnerabilities

CVE-2015-2798 [CRITICAL] CWE-89 CVE-2015-2798: SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE-2018-25347 [HIGH] CWE-89 CVE-2018-25347: WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authen WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMakerSQLMapping and generete_csv_fmc AJAX actions. Attackers can inject malicious SQL code via the 'name' and 'search_labels' parameters to extract sensitive database information or escalat

CVE-2023-2655 [HIGH] CWE-89 CVE-2023-2655: The Contact Form by WD WordPress plugin through 1.13.23 does not properly sanitise and escape a para The Contact Form by WD WordPress plugin through 1.13.23 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

CVE-2019-25734 [MEDIUM] CWE-22 CVE-2019-25734: Contact Form by WD 1.13.1 contains a cross-site request forgery vulnerability combined with local fi Contact Form by WD 1.13.1 contains a cross-site request forgery vulnerability combined with local file inclusion that allows unauthenticated attackers to include arbitrary files by exploiting unsanitized action parameters. Attackers can craft malicious forms targeting the admin-ajax.php endpoint with directory traversal sequences in the GET action pa