title: WordPress Contact Form to Any API Plugin <= 1.1.2 is vulnerable to SQL Injection
description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IT Path Solutions PVT LTD Contact Form to Any API allows SQL Injection.This issue affects Contact Form to Any API: from n/a through 1.1.2.
problem types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
affected:
{
collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: contact-form-to-any-api
product: Contact Form to Any API
vendor: IT Path Solutions PVT LTD
versions:
changes: [at: 1.1.3, status: unaffected], lessThanOrEqual: 1.1.2, status: affected, version: n/a, versionType: custom
}
solutions: Update to 1.1.3 or a higher version.