WordPress security by component

FormCraft

Plugin description

FormCraft is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 21, 2022; the highest CVE/CNA score is 9.1.

Plugin slug: formcraft3

Latest vulnerability

CVE-2022-0591: FormCraft: Server-side request forgery

FormCraft is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests.

PublishedMar 21, 2022

Safe version guidanceSee mitigation notes

		Safe version
Mar 21, 2022	CVE-2022-0591 FormCraft: Server-side request forgery FormCraft is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests.	See mitigation notes	CVE9.1 NVD9.1