← Back

Formcraft

formcraft

Vendor: Formcrafts • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-3501
1Formcrafts
1Formcraft
Jun 17, 2026
Aug 30, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
The FormCraft WordPress plugin before 1.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_...Show more
The FormCraft WordPress plugin before 1.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).Show less
CVE-2017-13137
1Formcrafts
1Formcraft
May 13, 2026
Aug 23, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.