CVE-2015-9234 — CVE-2015-9234

CVE-2015-9234

HIGH · CVSS 7.2

EPSS exploitation probability: 0%

Published 2017-09-30T01:29:00.337 · Last modified 2026-06-17T00:36:06.500

Summary

The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has SQL injection via the cp_contactformpp_id parameter to cp_contactformpp.php.

Affected products

cfpaypal — cp_contact_form_with_paypal

Does this affect you?

Add your gear to cvedb and we'll alert you only when cfpaypal ships something exploited.

Check my exposure →

References

NVD entry
CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.