SAMO Forms <= 1.0.0 - Unauthenticated SQLi
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.6epss 0.3%
exploitation probability
0.3%top 74% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL queries in several unauthenticated actions, allowing unauthenticated attackers to perform SQL injection attacks.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected products
Unknown · SAMO Formspublic PoCs found — 1
cve_referencewpscan.com/vulnerability/765e7131-2eb4-41df-a1e0-05c8a89cb88c/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.