8.5
High
CVE-2026-42742 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL Injection.This issue affects Views for WPForms: from n/a through <= 3.4.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Views for WPForms 3.4 | earliest → 3.4.6 | No fix stated |