189 matches found
WordPress FormCraft plugin <= 1.2.1 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Masaki Saito in WordPress FormCraft plugin versions = 1.2.1. Solution Update the WordPress FormCraft plugin to the latest available version at least 1.2.2...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...
CVE-2019-5920
Cross-site request forgery CSRF vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...
CVE-2019-5920
Cross-site request forgery CSRF vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...
CVE-2019-5920
Cross-site request forgery CSRF vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...
CVE-2019-5920
The CVE refers to the WordPress FormCraft plugin, version
PT-2019-17862
Name of the Vulnerable Software and Affected Versions FormCraft versions 1.2.1 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via a specially crafted page. Recommendations For FormCraft versions 1.2.1 and...
CVE-2019-5920: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...
WordPress plugin 'FormCraft' cross-site request forgery vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin 'FormCraft'. If a user logs into the WordPress admi...
WordPress plugin "FormCraft" vulnerable to cross-site request forgery
Overview The WordPress plugin "FormCraft" provided by nCrafts contains a cross-site request forgery vulnerability CWE-352. Masaki Saito of TDU Cryptography Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impac...
JVN#83501605: WordPress plugin "FormCraft" vulnerable to cross-site request forgery
The WordPress plugin "FormCraft" provided by nCrafts contains a cross-site request forgery vulnerability CWE-352. Impact Unintended operations may be performed if a user logs into the WordPress administration screen and browses a malicious page. Those operations may include generating new forms,...
FormCraft <= 1.2.1 - Cross-Site Request Forgery (CSRF)
The FormCraft – Contact Form Builder for WordPress WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...
formcraft-wp.com XSS vulnerability
Open Bug Bounty ID: OBB-569334 Description| Value ---|--- Affected Website:| formcraft-wp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
formcraft-wp.com XSS vulnerability
Open Bug Bounty ID: OBB-548115 Description| Value ---|--- Affected Website:| formcraft-wp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WordPress FormCraft Plugins - Cross-Site Scripting Image type Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress Plugins FormCraft - Cross-Site Scripting Image Type Google Dork: inurl:/wp-content/plugins/formcraft/ Exploit Author: AlHikam0x Tested on: Ubuntu Proof of Concept Check blank page :...
WordPress FormCraft Basic Plugin SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . FormCraft Basic plugin is one of the form creation plugin . A SQL injection vulnerability exists in version 1.0...
Sql injection
The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...
CVE-2017-13137
The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...