Back to Database
Status published
Unknown
CVE-2024-31077
Forminator prior to 1.29.3 contains a SQL injection vulnerability. If...
Vulnerability Description
Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege may obtain and alter any information in the database and cause a denial-of-service (DoS) condition.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-31077
Credits & Attribution
No credits recorded in the NVD database.
References
More from WPMU DEV
View All →CVE-2024-45625
Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1....
Unknown
0
CVE-2024-31857
Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If...
Unknown
0
CVE-2024-28890
Forminator prior to 1.29.0 contains an unrestricted upload of file...
Unknown
0
CVE-2024-25595
WordPress Defender Security plugin <= 4.4.1 - IP Restriction Bypass vulnerability
Medium
5.3
CVE-2024-25592
WordPress Broken Link Checker plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability
Medium
5.9
Affected Vendor
WPMU DEV
View all reports →Affected Software
Forminator
Vulnerable Versions:
prior to 1.29.3
Timeline
Official Publish:
April 23rd, 2024
Last Modified:
August 2nd, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.