CVE-2017-13137 (formcraft)

CVE-2017-13137 (formcraft)

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.

Source: CVE-2017-13137 (formcraft)