{"slug":"ultimate-form-builder-lite","name":"Contact Form for WordPress – Ultimate Form Builder Lite","latest_version":"1.3.7","last_updated":"2018-03-27T17:08:07.289Z","vulnerabilities":[{"id":"8798","title":"Contact Form for WordPress – Ultimate Form Builder Lite <= 1.3.2 - Authenticated Cross-Site Scripting (XSS)","created_at":"2017-04-20T12:22:21Z","updated_at":"2017-10-23T19:51:02Z","published_date":"2017-04-19T00:00:00Z","references":{"url":["http://www.defensecode.com/advisories/DC-2017-01-027_WordPress_Ultimate_Form_Builder_Plugin_Advisory.pdf"],"osvdb":null,"secunia":null,"cve":null,"exploitdb":null},"vuln_type":"XSS","fixed_in":"1.3.3","criticity":0.0},{"id":"8935","title":"Contact Form for WordPress – Ultimate Form Builder Lite <= 1.3.6 - SQL Injection","created_at":"2017-10-23T19:50:11Z","updated_at":"2017-10-30T09:12:11Z","published_date":"2017-10-23T00:00:00Z","references":{"url":["https://www.wordfence.com/blog/2017/10/zero-day-vulnerability-ultimate-form-builder-lite/","https://plugins.trac.wordpress.org/changeset/1750550/ultimate-form-builder-lite"],"osvdb":null,"secunia":null,"cve":["2017-15919"],"exploitdb":null},"vuln_type":"MULTI","fixed_in":"1.3.7","criticity":0.0}]}