Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-65442 2 Subtlewebinc, Wordpress 2 Formcraft3, Wordpress 2026-07-28 7.2 High
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
CVE-2022-0591 1 Subtlewebinc 1 Formcraft3 2024-11-21 9.1 Critical
The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users