Advisories · Technology
hancock11 WP Forms Connector.
Every CVE that names hancock11 WP Forms Connector among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
WP Forms Connector <= 1.8 - Missing Authorization to Unauthenticated Information Exposure via 'user/list' REST Endpoint
- hancock11 WP Forms Connector
- Broken access control
- CVSS 7.5 High
WP Forms Connector <= 1.8 - Unauthenticated SQL Injection via 'order' Parameter
- hancock11 WP Forms Connector
- SQL injection