title: WordPress Quasar form Plugin <= 6.0 is vulnerable to SQL Injection
description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nucleus_genius Quasar form free – Contact Form Builder for WordPress allows SQL Injection.This issue affects Quasar form free – Contact Form Builder for WordPress: from n/a through 6.0.
problem types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
affected:
{
collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: quasar-form
product: Quasar form free – Contact Form Builder for WordPress
vendor: Nucleus_genius
versions:
lessThanOrEqual: 6.0, status: affected, version: n/a, versionType: custom
}