Browse CVEs

MEDIUM 6.1 CVE-2025-0817 The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.9.11 due… Formcraft 3.9.12+ Fix from $1,6002025-02-18 HIGH 7.2 CVE-2023-2592 The FormCraft WordPress plugin before 3.9.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL in… Formcraft 3.9.7+ Fix from $1,9502023-06-27 MEDIUM 5.4 CVE-2023-22717 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in nCrafts FormCraft plugin <= 1.2.6 versions. Formcraft after 1.2.6 Fix from $1,6002023-05-15 MEDIUM 5.4 CVE-2017-18600 The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field. Formcraft after 3.2.31 Fix from $1,6002019-09-10 HIGH 8.8 CVE-2019-15114 The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF. Formcraft 1.2.2+ Fix from $1,9502019-08-16 HIGH 8.8 CVE-2019-5920 Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators… Formcraft after 1.2.1 Fix from $1,9502019-03-12 HIGH 7.5 CVE-2013-7187 SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL comm… Formcraft after 1.3.7 Fix from $1,9502013-12-20