WordPress FormCraft Plugins - Cross-Site Scripting Image type Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugins FormCraft - Cross-Site Scripting Image Type Google Dork: inurl:/wp-content/plugins/formcraft/ Exploit Author: AlHikam0x Tested on: Ubuntu Proof of Concept Check blank page :...

WordPress FormCraft Basic Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . FormCraft Basic plugin is one of the form creation plugin . A SQL injection vulnerability exists in version 1.0...

CVE-2017-13137

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...

CVE-2017-13137

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...

Sql injection

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...

CVE-2017-13137

CVE-2017-13137 : Affects WordPress FormCraft Basic plugin 1.0.5. The vulnerability is an SQL injection in the id parameter of form.php, allowing potentially arbitrary SQL execution. Documented CVSS scores: CVSSv2 base 7.5 (HIGH) and CVSSv3.1 base 9.8 (CRITICAL). Exploitation details are not provi...

CVE-2017-13137

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...

WordPress FormCraft Form Builder Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress FormCraft Form Builder. An attacker can exploit this vulnerability t...

FormCraft - Premium WordPress Form Builder <= v3.2.31 - Authenticated Stored XSS

WordPress FormCraft Premium WordPress Form Builder versions 3.2.31 and below suffer from a persistent Cross-Site Scripting XSS vulnerability. PoC Authenticated Stored XSS: New Form Heading Heading Text input field is vulnerable. The payload will execute when the form is displayed...

WordPress FormCraft Form Builder 3.2.31 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: FormCraft - Premium WordPress Form Builder Heading Heading Text input field is vulnerable. The payload will execute when the form is displayed. ================== 8bitsec - https://twitter.com/8bitsec 0day.today 2018-04-04...

FormCraft - Premium WordPress Form Builder <= v3.2.31 - Authenticated Stored XSS

WordPress FormCraft Premium WordPress Form Builder versions 3.2.31 and below suffer from a persistent Cross-Site Scripting XSS vulnerability. Authenticated Stored XSS: New Form Heading Heading Text input field is vulnerable. The payload will execute when the form is displayed...

WordPress FormCraft 3 premium plugin <=3.2.31 - Authenticated Stored Cross-site scripting (XSS) vulnerability

Authenticated Stored Cross-site scripting XSS vulnerability found by 8bitsec in WordPress FormCraft 3 premium plugin alternative name - FormCraft Premium WordPress Form Builder. Solution 2017.07.29 - we were unable to find any information about patched version of WordPress FormCraft 3 premium...

WordPress FormCraft Form Builder 3.2.31 Cross Site Scripting

Exploit Title: FormCraft - Premium WordPress Form Builder Heading Heading Text input field is vulnerable. The payload will execute when the form is displayed. ================== 8bitsec - https://twitter.com/8bitsec...

WordPress FormCraft Basic Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress FormCraft Basic plugin version 1.0.5, which can be exploited by attacke...

WordPress FormCraft Basic 1.0.5 SQL Injection

Exploit Title: FormCraft Basic v1.0.5 blind and header sql injection Google Dork: inurl: /formcraft -- inurl:formcraft/form.php Software Link: formcraft-wp.com Date: 05/07/2017 Exploit Author: Seyyed Amir Hossein Mir Hosseini Root & r0m3r0 Version: v1.0.5 Tested on: wordpress sites and CentOS...

Wordpress Formcraft插件-upload.php-文件上传漏洞

No description provided by source...

Wordpress Formcraft 插件upload.php文件上传漏洞

No description provided by source...

WordPress FormCraft Plugin <= 2.0.5 Arbitrary File Deletion

This plugin is prone to an arbitrary file deletion vulnerability. Solution Update the plugin...

FormCraft <= 2.0.5 - Arbitrary File Deletion

Successfully tested with v2.0.2...

Wordpress Plugin FormCraft Premium Arbitrary File Deletion

The FormCraft v2.0.5 is a feature rich WordPress plug-in that provides you the perfect platform for creating the multiple forms with so many specific fields that supports retina graphics. It incorporates tons of styling options, Form validation, GUI form builder, custom widgets; support multiple...