Unknown Formcraft vulnerabilities

• subtle web inc formcraft WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-65442 7.2 HighJuly 27, 2026
• formcraft FormCraft <= 3.9.14 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Sub-Parameters CVE-2026-7232 7.2 HighJuly 23, 2026
• formcraft FormCraft <= 3.9.11 - Missing Authorization to Plugin Data Export in formcraft-main.php CVE-2024-13783 4.3 MediumFebruary 18, 2025
• formcraft FormCraft - Premium WordPress Form Builder <= 3.9.11 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload CVE-2025-0817 7.2 HighFebruary 18, 2025
• ncrafts formcraft WordPress FormCraft – Contact Form Builder for WordPress plugin <= 1.2.7 - Broken Access Control vulnerability CVE-2023-47823 5.3 MediumDecember 9, 2024
• ncrafts formcraft WordPress FormCraft plugin <= 1.2.10 - Broken Access Control vulnerability CVE-2024-43157 4.3 MediumNovember 1, 2024
• formcrafts formcraft FormCraft < 1.2.7 - Admin+ Stored XSS CVE-2023-3501 4.8 MediumAugust 30, 2023
• ncrafts formcraft FormCraft Premium < 3.9.7 - Admin+ SQLi CVE-2023-2592 7.2 HighJune 27, 2023
• ncrafts formcraft WordPress FormCraft Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-22717 6.5 MediumMay 15, 2023
• ncrafts formcraft, unknown formcraft – contact form builder for wordpress +1 more FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scripting CVE-2022-1647 4.8 MediumJune 6, 2022
• subtlewebinc formcraft3, unknown formcraft +1 more Formcraft3 < 3.8.28 - Unauthenticated SSRF CVE-2022-0591 Public exploit EPSS 20.2% 9.1 CriticalMarch 21, 2022
• ncrafts formcraft Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote... CVE-2019-5920 8.8 HighMarch 12, 2019