Home / Vulnerability Intelligence / CVE-2026-42742

CVE-2026-42742 - Vulnerability Analysis

HighCVSS: 8.5

Last Updated: May 12, 2026

Aman Views for WPForms - SQL Injection

Published: May 12, 2026Updated: May 12, 2026Remote Exploitable

Overview

Aman Views for WPForms <= 3.4.6 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers perform blind SQL injection remotely, exploit requires crafted input.

Severity & Score

Severity: High

CVSS Score: 8.5

EPSS Score: 3.0%(Probability of exploitation in next 30 days)

Impact

Attackers can perform blind SQL injection to extract or manipulate database information remotely.

Mitigation

Update to the latest version beyond 3.4.6.

References

https://patchstack.com/database/Wordpress/Plugin/views-for-wpforms-lite/vulnerability/wordpress-views-for-wpforms-plugin-3-4-6-sql-injection-vulnerability?_s_id=cve

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

May 12, 2026

🟠 CVE-2026-42742 - High (8.5) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL Injection.This issue affects Views for WPForms: from n/a through <= 3.4.6. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42742/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

May 12, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-42742
Severity: High
CVSS Score: 8.5
Type: sql_injection
Status: rejected
EPSS: 3.0%
Social Posts: 2

CWE

CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

EPSS Score

3.0%Probability of exploitation in the next 30 days