CVE-2017-1002027

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in WordPress plugin rk-responsive-contact-form version 1.0 is due to the lack of sanitization of the $delid variable before it is used in an SQL query.

Risk Assessment

The lack of sanitization may lead to SQL Injection attacks, posing a serious threat to data security within the organization.

Recommendation

It is recommended to update the plugin to the latest version and to add proper sanitization of the $delid variable before using it in SQL queries.

Original NVD description (English source)

Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being passed into an SQL query in file ./rk-responsive-contact-form/include/rk_user_list.php.