7.2
High
CVE-2022-3764 The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability
Description
The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Form Vibes 1.4 | earliest → < 1.4.6 | 1.4.6 |