Vulnerability index

Browse CVEs

7 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Formcraft MEDIUM 6.1

CVE-2025-0817

The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.9.11 due…

Fix: 3.9.12+

Fix from $1,600 2025-02-18

Formcraft HIGH 7.2

CVE-2023-2592

The FormCraft WordPress plugin before 3.9.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL in…

Fix: 3.9.7+

Fix from $1,950 2023-06-27

Formcraft MEDIUM 5.4

CVE-2023-22717

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in nCrafts FormCraft plugin <= 1.2.6 versions.

Fix: after 1.2.6

Fix from $1,600 2023-05-15

Formcraft MEDIUM 5.4

CVE-2017-18600

The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field.

Fix: after 3.2.31

Fix from $1,600 2019-09-10

Formcraft HIGH 8.8

CVE-2019-15114

The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF.

Fix: 1.2.2+

Fix from $1,950 2019-08-16

Formcraft HIGH 8.8

CVE-2019-5920

Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators…

Fix: after 1.2.1

Fix from $1,950 2019-03-12

Formcraft HIGH 7.5

CVE-2013-7187

SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL comm…

Fix: after 1.3.7

Fix from $1,950 2013-12-20