The SAMO Forms WordPress plugin is vulnerable to unauthenticated SQL injection attacks, which could allow an attacker to compromise database integrity.

This vulnerability is a SQL injection (CWE-89) flaw occurring in several unauthenticated actions within the plugin. An unauthenticated attacker can supply malicious input to database queries, potentially leading to unauthorized data access.

Successful exploitation of this vulnerability allows unauthenticated attackers to execute arbitrary SQL commands against the WordPress database. Given the CVSS score of 8.6, this represents a high-severity risk that could lead to the exposure of sensitive user data, credential theft, or complete database compromise.

Immediate Action: Since no specific patch version is currently identified, verify if a security update is available via the WordPress plugin repository or the vendor. If no update exists, disable and remove the SAMO Forms plugin until a secure version is released.

Proactive Monitoring: Monitor database query logs for anomalous activity or unexpected syntax patterns that deviate from standard plugin operation.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns to provide a virtual patch layer.

Public Exploit Available: No

Given the high CVSS severity and the ease of exploitation, security teams should treat this vulnerability with urgency. If the plugin is not essential for business operations, the most effective mitigation is immediate removal until a vendor-supplied patch is confirmed as available and installed.