Files
CVEs-PoC/2017/CVE-2017-15919.md
2025-09-29 21:09:30 +02:00

722 B

CVE-2017-15919

Description

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php.

POC

Reference

Github