SAMO Forms <= 1.0.0 - Unauthenticated SQLi
Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.
cve-program · CVE-2026-80491
PublishedThe SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL queries in several unauthenticated actions, allowing unauthenticated attackers to perform SQL injection attacks.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-80491
PublishedSAMO Forms <= 1.0.0 - Unauthenticated SQLi
The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL queries in several unauthenticated actions, allowing unauthenticated attackers to perform SQL injection attacks.
- Source published
- 12 Sep 2026 06:00:08 UTC
- Source modified
- 12 Sep 2026 15:34:36 UTC
- Saved here
- 23 Oct 2026 15:48:27 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.