WP plugin + SQLi = $200 ๐ธ cryptocat.me/blog/researc...
cryptocat.meForm Maker Unauthenticated SQL Injection via the Dynamic Choices Reload | CVE-2026-95808 | CryptoCat's BlogRoot cause analysis of CVE-2026-95808 in Form Maker by 10Web, where the public dynamic choices reload rewrote a stored SQL WHERE template with request data and a form feed byte slipped past both the W...
0 reposts2 likes