CVE-2015-7806

Critical

Published: 17/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code.

Risk Assessment

An attacker can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to update the Form Manager plugin to version 1.7.3 or later to mitigate this vulnerability.

Original NVD description (English source)

Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors.