CVE-2022-3689

Name of the Vulnerable Software and Affected Versions HTML Forms WordPress plugin versions prior to 1.3.25

Description The issue is related to a SQL injection that occurs because a parameter is not properly escaped before being used in a SQL statement. This can be exploited by high privilege users.

Recommendations For versions prior to 1.3.25, update to version 1.3.25 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality to minimize the risk of exploitation by high privilege users.