CVE-2018-21003 - The buddyforms plugin before 2.2.8 for WordPress has SQL injection

CRITICAL

The buddyforms plugin before 2.2.8 for WordPress has SQL injection

Published Aug 27, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 1.83%

The buddyforms plugin before 2.2.8 for WordPress has SQL injection.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://wordpress.org/plugins/buddyforms/#developers		x_refsource_MISCRelease Notes
https://wpvulndb.com/vulnerabilities/9829		x_refsource_MISCBroken Link

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Aug 27, 2019

Updated Aug 5, 2024

Reserved Aug 26, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a