cvedb.io
CVE-2015-7806
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2017-10-17T16:29:00.423 · Last modified 2026-06-17T00:33:10.407

Summary

Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

form_manager_project — form_manager

Does this affect you?

Add your gear to cvedb and we'll alert you only when form_manager_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.