CVE-2023-28663 in Formidable PRO2PDF Plugin
Summary
by MITRE • 03/22/2023
The Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL injection vulnerability in the ‘fieldmap’ parameter in the fpropdf_export_file action.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 12/07/2025
The Formidable PRO2PDF WordPress plugin version 3.10 and earlier contains a critical authenticated SQL injection vulnerability that affects the fpropdf_export_file action. This vulnerability specifically targets the 'fieldmap' parameter, which is processed within the plugin's export functionality. The issue arises from inadequate input validation and sanitization of user-supplied data, allowing authenticated attackers with sufficient privileges to execute malicious SQL commands against the underlying database. The vulnerability is particularly concerning because it requires only authenticated access to the WordPress administrative interface, making it exploitable by users with subscriber-level privileges or higher.
The technical flaw stems from improper parameter handling within the plugin's backend processing logic. When the fpropdf_export_file action is invoked with a crafted 'fieldmap' parameter, the input is directly incorporated into SQL queries without proper escaping or preparation mechanisms. This creates an opportunity for attackers to manipulate the SQL execution flow and potentially extract sensitive data, modify database records, or even escalate privileges within the WordPress environment. The vulnerability aligns with CWE-89, which specifically addresses SQL injection flaws, and represents a classic case of insufficient input sanitization in database query construction.
The operational impact of this vulnerability extends beyond simple data theft, as it provides attackers with potential access to sensitive user information stored within the WordPress database. Given that Formidable PRO2PDF is commonly used for generating PDF forms and processing user submissions, the compromised data may include personal information, form responses, and potentially administrative credentials. Attackers could leverage this vulnerability to gain persistent access to the WordPress installation, potentially leading to full site compromise and subsequent attacks on other systems within the network infrastructure. The vulnerability's exploitation requires minimal privileges, making it particularly dangerous in environments where multiple users have administrative access.
Mitigation strategies should prioritize immediate plugin updates to version 3.11 or later, which contain the necessary patches for this vulnerability. Organizations should also implement network segmentation and access controls to limit administrative privileges, ensuring that only trusted users have the ability to modify plugin configurations. Additionally, monitoring for unusual export activities and implementing database query logging can help detect potential exploitation attempts. The vulnerability demonstrates the importance of maintaining current plugin versions and following security best practices such as the principle of least privilege. According to ATT&CK framework, this vulnerability maps to T1078 for valid accounts and T1566 for credential access, highlighting the need for comprehensive security monitoring and access control measures.