CVE-2017-15919

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php.

Date published : 2017-10-26

http://www.securityfocus.com/bid/101604

https://wordpress.org/plugins/ultimate-form-builder-lite/#developers