CVE-2025-8420

Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emd_form_builder_lite_pagenum function. This is due to the plugin not properly validating user input before using it as a function name. This makes it possible for unauthenticated attackers to execute code on the server, however, parameters can not be passed to the functions called

Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emd_form_builder_lite_pagenum function. This is due to the plugin not properly validating user input before using it as a function name. This makes it possible for unauthenticated attackers to execute code on the server, however, parameters can not be passed to the functions called

El complemento Request a Quote Form para WordPress es vulnerable a la ejecución remota de código en versiones anteriores o iguales a la 2.5.2 a través de la función emd_form_builder_lite_pagenum. Esto se debe a que el complemento no valida correctamente la entrada del usuario antes de usarla como nombre de función. Esto permite que atacantes no autenticados ejecuten código en el servidor; sin embargo, no se pueden pasar parámetros a las funciones llamadas.