WordPress security by component

iATS Online Forms

Plugin description

iATS Online Forms is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 29, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: iats-online-forms

Latest vulnerability

CVE-2025-9441: iATS Online Forms: SQL injection

iATS Online Forms is affected by SQL injection. Exploitation requires at least contributor-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedAug 29, 2025

Safe version guidanceSee mitigation notes

		Safe version
Aug 29, 2025	CVE-2025-9441 iATS Online Forms: SQL injection iATS Online Forms is affected by SQL injection. Exploitation requires at least contributor-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE6.5 NVDPending