CVE-2017-15919

CRITICAL · CVSS 9.8 EPSS 2.48%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-10-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2017-15919

Severity

CRITICAL

CVSS

9.8

EPSS

2.48%

WordPress

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php.