162 matches found
EUVD-2026-49660
Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...
CVE-2026-65442
Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...
CVE-2026-65442 WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...
CVE-2026-65442
Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...
CVE-2026-65442
CVE-2026-65442 is an unauthenticated Server-Side Request Forgery (SSRF) in the WordPress FormCraft plugin (versions ≤ 3.9.15). The root cause is missing nonce verification and authentication checks on the formcraft3_get AJAX endpoint, allowing an unauthenticated attacker to force the server to is...
WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by luc in WordPress Plugin FormCraft versions = 3.9.15...
PT-2026-65321
Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...
CVE-2026-7232
The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'parameter name' parameter in all versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2026-7232
The CVE-2026-7232 entry describes a Stored XSS in the WordPress FormCraft plugin (all versions up to 3.9.14). Root cause: insufficient input sanitization and output escaping, with a server-side gap where matrix sub-field keys like field2_0/field2_1 bypass the sanitization loop and are stored via ...
EUVD-2026-47878
The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'parameter name' parameter in all versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2026-7232 FormCraft <= 3.9.14 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Sub-Parameters
The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'parameter name' parameter in all versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2022-0591
The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3get AJAX action, leading to SSRF issues exploitable by unauthenticated users...
EUVD-2019-6185
Malware in sbrugna...
EUVD-2019-15488
Malware in sbrugna...
EUVD-2013-6970
Malware in sbrugna...
EUVD-2017-4654
Malware in sbrugna...
EUVD-2025-4807
Malicious code in bioql PyPI...
EUVD-2023-26846
Malicious code in bioql PyPI...