3 matches found
CVE-2019-15114
The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF.
CVE-2019-5920
Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.
CVE-2017-18600
The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field.