Formcraft (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-08-30. Vendor: Unknown.

CVEs of Formcraft

• CVE-2023-3501 - CVSS 4.8 (medium), 2023-08-30: The FormCraft WordPress plugin before 1.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
• CVE-2023-2592 - CVSS 7.2 (high), 2023-06-27: The FormCraft WordPress plugin before 3.9.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection…
• CVE-2022-0591 - CVSS 9.1 (critical), 2022-03-21: The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by…