TI-2015-07614 CVE-2015-9234 · GHSA-jhf5-m3c7-36jwThe cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for…Priority LOW 36The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has SQL injection via the cp_contactformpp_id parameter to cp_contactformpp.php.CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02024 · Published 2017-09-29 · No fix listed CWE-89