WordPress plugin
IWS – Geo Form Fields security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High0
- Medium0
- Low0
All IWS – Geo Form Fields vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Geo Form Fields <= 1.0 - Unauthenticated SQL Injection ≤1.0No patch available | CVE-2022-4117 |
- Critical9.8Geo Form Fields <= 1.0 - Unauthenticated SQL Injection
≤1.0No patch available
IWS – Geo Form Fields: common questions
Does IWS – Geo Form Fields have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in IWS – Geo Form Fields: 1 critical. At least one is not fixed in the latest version.
How do I check which version of IWS – Geo Form Fields I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent IWS – Geo Form Fields vulnerability?
CVE-2022-4117, published Nov 30, 2022: IWS - Geo Form Fields <= 1.0 - Unauthenticated SQL Injection. Severity: Critical (CVSS 9.8).
Is any IWS – Geo Form Fields vulnerability listed in CISA KEV?
No. None of the known IWS – Geo Form Fields vulnerabilities is currently listed in the CISA KEV catalog.