CVE-2019-9568

The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=forminator-entries entry[] parameter if the attacker has the delete permission.

• CWE-89

• https://lists.openwall.net/full-disclosure/2019/02/05/4Exploit, Third Party Advisory
• https://security-consulting.icu/blog/2019/02/wordpress-forminator-persistent-xss-blind-sql-injection/Exploit, Third Party Advisory
• https://wordpress.org/plugins/forminator/#developersRelease Notes, Vendor Advisory
• https://wpvulndb.com/vulnerabilities/9215Third Party Advisory
• https://lists.openwall.net/full-disclosure/2019/02/05/4Exploit, Third Party Advisory
• https://security-consulting.icu/blog/2019/02/wordpress-forminator-persistent-xss-blind-sql-injection/Exploit, Third Party Advisory
• https://wordpress.org/plugins/forminator/#developersRelease Notes, Vendor Advisory
• https://wpvulndb.com/vulnerabilities/9215Third Party Advisory

Published

Mar 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9558Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Si…
• CVE-2019-9563In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-…
• CVE-2019-9564A vulnerability in the authentication logic of Wyze Cam Pan …9.8
• CVE-2019-9565Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.393…
• CVE-2019-9566FlarumChina v0.1.0-beta.7C has SQL injection via a /?q= requ…
• CVE-2019-9567The "Forminator Contact Form, Poll & Quiz Builder" plugin be…6.1
• CVE-2019-9569Buffer Overflow in dactetra in Delta Controls enteliBUS Mana…
• CVE-2019-9570An issue was discovered in YzmCMS 5.2.0. It has XSS via the …
• CVE-2019-9572SchoolCMS version 2.3.1 allows file upload via the theme upl…
• CVE-2019-9573The WP Human Resource Management plugin before 2.2.6 for Wor…
• CVE-2019-9574The WP Human Resource Management plugin before 2.2.6 for Wor…
• CVE-2019-9575The Quiz And Survey Master plugin 6.0.4 for WordPress allows…