WesternDeal WPForms Google Sheet Connector Code Injection Vulnerability Allowing Remote Code Execution

A code injection vulnerability has been identified in the WesternDeal WPForms Google Sheet Connector plugin, specifically in versions through 4.0.1. This vulnerability allows for remote code execution, enabling malicious actors to execute commands on the affected website, potentially leading to unauthorized access and control.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected website, which could be used to gain backdoor access and full control over the site.

Remediation

Users of the WPForms Google Sheet Connector plugin should update to version 4.0.2 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.