CRM Perks Forms <= 1.1.4 - SQL Injection
CRM Perks CRM Perks Forms (affected versions 1.1.4 and earlier) contains a SQL injection caused by improper neutralization of special elements used in an SQL command, letting attackers execute arbitrary SQL commands, exploit requires user interaction. References: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/crm-perks-forms/crm-perks-forms-114-unauthenticated-sql-injection https://patchstack.com/database/wordpress/plugin/crm-perks-forms/vulnerability/wordpress-crm-perks-forms-plugin-1-1-4-unauthenticated-sql-injection-vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-30498 Remediation: Update to the latest version of CRM Perks Forms, version 1.1.5 or later.
Used 2.3k times · 2 assets checked · domain, subdomain, ipv4