CVE PROGRAM SOURCE RECORD7.6 High

CVE-2023-30872

WordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection

Status: Published
Published: 2023-12-20
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BannerSky BSK Forms Blacklist.This issue affects BSK Forms Blacklist: from n/a through 3.6.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BannerSky BSK Forms Blacklist

Default version status: unaffected

n/a to ≤ 3.6.2affected

References

https://patchstack.com/database/vulnerability/bsk-gravityforms-blacklist/wordpress-bsk-forms-blacklist-plugin-3-6-2-sql-injection-vulnerability?_s_id=cve ↗