form manager project vulnerabilities

Products

• form manager 1

Latest form manager project CVEs

Newest publication first

1. CVE-2015-7806 Form Manager <= 1.7.2 - Authenticated Remote Command Execution

   Published 2017-10-17

   Critical·CVSS 9.8 EPSS 6.0%

   Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.