CVE-2019-5920

Cross-site request forgery CSRF vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...

CVE-2019-5920

Cross-site request forgery CSRF vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...

CVE-2019-5920

The CVE refers to the WordPress FormCraft plugin, version

CVE-2019-5920

Cross-site request forgery CSRF vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...

WordPress plugin 'FormCraft' cross-site request forgery vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin 'FormCraft'. If a user logs into the WordPress admi...

WordPress plugin "FormCraft" vulnerable to cross-site request forgery

Overview The WordPress plugin "FormCraft" provided by nCrafts contains a cross-site request forgery vulnerability CWE-352. Masaki Saito of TDU Cryptography Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impac...

FormCraft <= 1.2.1 - Cross-Site Request Forgery (CSRF)

The FormCraft – Contact Form Builder for WordPress WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

JVN#83501605: WordPress plugin "FormCraft" vulnerable to cross-site request forgery

The WordPress plugin "FormCraft" provided by nCrafts contains a cross-site request forgery vulnerability CWE-352. Impact Unintended operations may be performed if a user logs into the WordPress administration screen and browses a malicious page. Those operations may include generating new forms,...

formcraft-wp.com XSS vulnerability

Open Bug Bounty ID: OBB-569334 Description| Value ---|--- Affected Website:| formcraft-wp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

formcraft-wp.com XSS vulnerability

Open Bug Bounty ID: OBB-548115 Description| Value ---|--- Affected Website:| formcraft-wp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress FormCraft Plugins - Cross-Site Scripting Image type Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugins FormCraft - Cross-Site Scripting Image Type Google Dork: inurl:/wp-content/plugins/formcraft/ Exploit Author: AlHikam0x Tested on: Ubuntu Proof of Concept Check blank page :...

WordPress FormCraft Basic Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . FormCraft Basic plugin is one of the form creation plugin . A SQL injection vulnerability exists in version 1.0...

Sql injection

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...

CVE-2017-13137

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...

CVE-2017-13137

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...

CVE-2017-13137

CVE-2017-13137 : Affects WordPress FormCraft Basic plugin 1.0.5. The vulnerability is an SQL injection in the id parameter of form.php, allowing potentially arbitrary SQL execution. Documented CVSS scores: CVSSv2 base 7.5 (HIGH) and CVSSv3.1 base 9.8 (CRITICAL). Exploitation details are not provi...

CVE-2017-13137

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...

WordPress FormCraft Form Builder Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress FormCraft Form Builder. An attacker can exploit this vulnerability t...

FormCraft - Premium WordPress Form Builder <= v3.2.31 - Authenticated Stored XSS

WordPress FormCraft Premium WordPress Form Builder versions 3.2.31 and below suffer from a persistent Cross-Site Scripting XSS vulnerability. PoC Authenticated Stored XSS: New Form Heading Heading Text input field is vulnerable. The payload will execute when the form is displayed...