CVE-2015-7806: Form Manager Project Form Manager

Critical severity, CVSS 9.8. EPSS: 6% chance of exploitation in the next 30 days.

Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• Form Manager Project Form Manager: version 1.7.2 only

Published 2017-10-17. Last modified 2026-06-17.