Skip to main content

Database For Contact Form 7 Wpforms Elementor Forms CVE-2023-31212

HIGH
SQL Injection (CWE-89)
2023-10-31 audit@patchstack.com
WordPress SQLi Database For Contact Form 7 Wpforms Elementor Forms Wordpress Plugin Elementor Crmperks
8.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.5 HIGH
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
Low

Lifecycle Timeline

1
CVE Published
Oct 31, 2023 - 15:15 cve.org
HIGH 8.5

DescriptionCVE.org

A vulnerability in CRM Perks Contact Form Entries contact-form-entries.This issue affects Contact Form Entries: from n/a through <= 1.3.0.

AnalysisAI

A vulnerability in CRM Perks Contact Form Entries contact-form-entries.3.0. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. A vulnerability in CRM Perks Contact Form Entries contact-form-entries.3.0. Affected products include: Crmperks Database For Contact Form 7\, Wpforms\, Elementor Forms.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.

More in Database For Contact Form 7 Wpforms Elementor Forms

View all
CVE-2026-14870 HIGH POC
7.1 Jul 28

We need to generate a JSON object with the specified fields, synthesizing all provided data about CVE-2026-14870. First
CVE-2026-14872 MEDIUM POC
6.8 Aug 04

SQL injection in the Database for Contact Form 7, WPforms, Elementor forms WordPress plugin (versions before 1.5.5) expo
CVE-2026-12081 MEDIUM POC
5.0 Jul 13

PHP object injection in the 'Database for Contact Form 7, WPforms, Elementor forms' WordPress plugin (all versions befor
CVE-2026-9843 HIGH
8.1 Jun 20

Arbitrary file deletion in the Database for Contact Form 7, WPforms, Elementor forms WordPress plugin (versions ≤1.5.1)

CVE-2024-1069 HIGH
7.2 Jan 31

The Contact Form Entries plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validatio
CVE-2026-9145 MEDIUM
6.5 Jul 02

Arbitrary file copy in the Database for Contact Form 7, WPforms, Elementor Forms WordPress plugin (versions ≤ 1.5.1) exp
CVE-2023-31095 MEDIUM
4.7 Dec 29

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form

CVE-2026-3831 MEDIUM
4.3 Apr 01

Authenticated attackers with Contributor-level access or above can extract all form submissions from the Database for Co

Same weakness CWE-89 – SQL Injection

View all
CVE-2023-48788 CRITICAL POC
9.8
CVE-2019-7481 HIGH POC
7.5
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8

Same technique SQLi

View all
CVE-2019-7481 HIGH POC
7.5
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8
CVE-2013-0333 HIGH POC
7.5

Share

CVE-2023-31212 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy