Ncrafts Formcraft vulnerabilities

• formcraft FormCraft <= 3.9.11 - Missing Authorization to Plugin Data Export in formcraft-main.php CVE-2024-13783 4.3 MediumFebruary 18, 2025
• formcraft FormCraft - Premium WordPress Form Builder <= 3.9.11 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload CVE-2025-0817 7.2 HighFebruary 18, 2025
• ncrafts formcraft WordPress FormCraft – Contact Form Builder for WordPress plugin <= 1.2.7 - Broken Access Control vulnerability CVE-2023-47823 5.3 MediumDecember 9, 2024
• ncrafts formcraft WordPress FormCraft plugin <= 1.2.10 - Broken Access Control vulnerability CVE-2024-43157 4.3 MediumNovember 1, 2024
• ncrafts formcraft FormCraft Premium < 3.9.7 - Admin+ SQLi CVE-2023-2592 7.2 HighJune 27, 2023
• ncrafts formcraft WordPress FormCraft Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-22717 6.5 MediumMay 15, 2023
• ncrafts formcraft, unknown formcraft – contact form builder for wordpress +1 more FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scripting CVE-2022-1647 4.8 MediumJune 6, 2022
• ncrafts formcraft The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading >... CVE-2017-18600 5.4 MediumSeptember 10, 2019
• ncrafts formcraft The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF. CVE-2019-15114 8.8 HighAugust 16, 2019
• ncrafts formcraft Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote... CVE-2019-5920 8.8 HighMarch 12, 2019
• ncrafts formcraft SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress... CVE-2013-7187 Public exploit 7.5 HighDecember 20, 2013