What’s Vulnerable › Vulnerabilities

CVE-2015-7806

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-17 · updated 2026-06-17
• Weakness: CWE-77

Description

Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• Form Manager Project Form Manager: 1.7.2

References

• http://appcheck-ng.com/remote-command-execution-in-wordpress-form-manager-plugin-cve-2015-7806/
• https://plugins.trac.wordpress.org/changeset/1264145
• https://wpvulndb.com/vulnerabilities/8220
• http://appcheck-ng.com/remote-command-execution-in-wordpress-form-manager-plugin-cve-2015-7806/
• https://plugins.trac.wordpress.org/changeset/1264145
• https://wpvulndb.com/vulnerabilities/8220

Get alerted when CVE-2015-7806 or the next vulnerability affects your stack