CVE-2013-7187

SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Date published : 2013-12-20

http://www.securityfocus.com/bid/64183

http://www.exploit-db.com/exploits/30002